Download the Migration Tool

by panagent on ‎03-23-2015 11:13 AM - edited on ‎05-30-2018 11:46 PM by Community Manager (234,982 Views)


The Palo Alto Networks Migration Tool is derived from the successful Migration Tool used by the Palo Alto Networks Professional Services Organization and Channel Partners. It’s an evolution of the Migration Tool into a configuration platform that allows you to, not only migrate configurations, but enhance, optimize, add, remove or edit elements, ultimately converting the legacy device rules into a next-generation model by creating App-IDs based on real traffic acquired from devices being installed or already in production. The Palo Alto Networks Migration Tool is a valuable asset for network security administrators who need or want to keep their rulebases in a pristine state.

Note: The Migration Tool is packaged as a virtual machine image. The download file is a zipped tar archive and the size is approximately 760MB.


Palo Alto Networks Community Members with Support Accounts

Community members who have a valid support account can download Migration Tool 3.3 (ensure you're logged on at the top of this page before attempting the download)

Click here to get the Migration Tool for VMware ESXi 5.5 (or higher) (updated to 3.3.10)
Click here to get the Migration Tool for VMplayer and Workstation


Don't Have a Support Account?

If you do not have a support account with us, then click the link below:


Click here to download Migration Tool 3.1



Please be aware the Migration Tool is provided as is, and is unsupported by our TAC. Assistance can be garnered through the Migration Tool Discussion Forum or by an onsite Professional Services Engineer, through your local sales contact.

on ‎09-21-2017 12:06 AM

Where can I find the checksum files for PaloAlto Migration Tool? (OVA & VMDK or .zip file)

by ms.jzam
on ‎10-12-2017 07:34 AM

The file downloaded for the ESX version, which is supposed to be upgraded to version 3.3.1 is named "" which makes it very unclear what version this really is.  Is this the 3.3.1 download or is this still a broken link that downloads the 3.1 version?

by KlausGroeger
on ‎04-24-2018 01:00 AM

Even if the download archive is named "" after download and install I get this host information:


And MT Dashborad tells me:


by ms.jzam
on ‎04-24-2018 08:45 AM

@KlausGroeger Thanks for adding that, we will have to takea  closer look!

by KlausGroeger
on ‎04-24-2018 09:20 AM

@ms.jzam Would be good to have 3.3.15 as download image. Else one has to patch the machine first befor being able to upgrade. Upgrade does not work from 3.3.10, I had to apply universal patch first as described here:


Thanks, Klaus

Ignite 2018, Amsterdam, Netherlands
Ask Questions Get Answers Join the Live Community