Download the Migration Tool

Printer Friendly Page


The Palo Alto Networks Migration Tool is derived from the successful Migration Tool used by the Palo Alto Networks Professional Services Organization and Channel Partners. It’s an evolution of the Migration Tool into a configuration platform that allows you to, not only migrate configurations, but enhance, optimize, add, remove or edit elements, ultimately converting the legacy device rules into a next-generation model by creating App-IDs based on real traffic acquired from devices being installed or already in production. The Palo Alto Networks Migration Tool is a valuable asset for network security administrators who need or want to keep their rulebases in a pristine state.

Note: The Migration Tool is packaged as a virtual machine image. The download file is a zipped tar archive and the size is approximately 760MB.


Palo Alto Networks Community Members with Support Accounts

Community members who have a valid support account can download Migration Tool 3.3 (ensure you're logged on at the top of this page before attempting the download)

Click here to get the Migration Tool for VMware ESXi 5.5 (or higher) (updated to 3.3.10)
Click here to get the Migration Tool for VMplayer and Workstation


Don't Have a Support Account?

If you do not have a support account with us, then click the link below:


Click here to download Migration Tool 3.1



Please be aware the Migration Tool is provided as is, and is unsupported by our TAC. Assistance can be garnered through the Migration Tool Discussion Forum or by an onsite Professional Services Engineer, through your local sales contact.

Tags (2)

Where can I find the checksum files for PaloAlto Migration Tool? (OVA & VMDK or .zip file)

The file downloaded for the ESX version, which is supposed to be upgraded to version 3.3.1 is named "" which makes it very unclear what version this really is.  Is this the 3.3.1 download or is this still a broken link that downloads the 3.1 version?

Even if the download archive is named "" after download and install I get this host information:


And MT Dashborad tells me:


@KlausGroeger Thanks for adding that, we will have to takea  closer look!

@ms.jzam Would be good to have 3.3.15 as download image. Else one has to patch the machine first befor being able to upgrade. Upgrade does not work from 3.3.10, I had to apply universal patch first as described here:


Thanks, Klaus

Ask Questions Get Answers Join the Live Community
Version history
Revision #:
17 of 17
Last update:
‎05-30-2018 11:46 PM
Updated by: