Migration Tool 3.0 info and Guide
The main objective of the Palo Alto Networks Migration Tool 3.0 is to assist network security administrators, professional consultants, or anyone working on a migration project, rules optimization, security controls validation, APP-ID implementation, as well as deploying these converted or new configurations to devices directly connected to the Palo Alto Networks Migration Tool 3 or by XML files exported as needed.
PLEASE NOTE: This is a Migration Tool, this is NOT a comprehensive Conversion Tool. This tool does not convert everything, it merely aids in the migration from Non-Palo Alto Network devices to Palo Alto Networks devices.
Here is a small list of what is and what is not currently supported when using the Migration Tool version 3.0.
Supported Platforms to import the config from:
- PAN-OS
- Cisco
- Check Point
- Juniper SRX
- ScreenOS
- Fortinet
- Sidewinder
- Stonesoft
Supported features:
- Import NAT rules for Cisco versions 8.3 and older but won’t migrate previous versions
- Import Twice NAT rules from Cisco devices
- Count objects inside a group (All Platforms) and will split object groups containing more than 500 objects into smaller groups and will create a single dynamic group pointing to these small groups also changing the security and NAT policies that reference these object groups.
- Ability to load several “configs,”, merge them into different “config candidates, and then release these new configurations into the PAN-OS 6.X by API calls or by exporting them into common XML file.
- Ability to merge one or more candidate configurations into a new or preexisting PAN-OS configuration.
- Ability to import active PAN-OS configurations, and tweak, edit, cut or manipulate the elements, perform a multi-edit throughout the XML elements in yourpresent (imported) configuration file with no code editing necessary.
Un-supported features:
- Will not import VPNs from any platforms but CISCO ASA.
About the Migration Tool 3 Guide
This guide takes you through the utilization of the new Palo Alto Networks Migration Tool 3. This guide is designed for users with previous knowledge of the PAN-OS platform.
Refer to the following resources for additional information:
- For support, Please remember the TAC does NOT support this tool. This tool is supported through the Palo Alto Networks Community. Refer to the following link to get the discussions page where you can look for info and post questions if you cannot find what you are looking for: Migration Tool Discussions
- For information on the additional capabilities of Palo Alto Networks firewalls and for instructions on configuring the features on the firewall, refer to the live homepage at: https://live.paloaltonetworks.com/welcome
31st July 2015 Update:
Please download latest User Guide for Migration Tool 3.1 from MigrationTool 3.1 User Guide
10th Feb 2016 Update:
Please download latest User Guide for Migration Tool 3.3 from MigrationTool 3.3 User Guide
