How To Use Expedition

[kiwi]

Palo Alto Networks is here to help you with migrations. Read more about Expedition, the Palo Alto Networks migration tool, and how it can help you migrate supported devices over to Palo Alto Networks. Find answers on LIVEcommunity.

Expedition is the fourth evolution of the Palo Alto Networks migration tool.

By using Expedition, everyone can convert a configuration from a supported vendor to a Palo Alto Networks device and give you more time to improve the results. Previously, Expedition v3 added some functionalities to allow our customers to enforce security policies based on App-ID and User-ID as well. 

With Expedition, we have gone one step further, not only because we want to continue helping to facilitate the transition of a security policy from others vendors to PAN-OS, but we also want to ensure the outcome is as best as possible. This is why we added a machine learning module that can help you generate new security policies based on real log traffic, which includes the introduction of the Best Practices Assessment tool to check that your configuration complies with the best practices recommended by our security experts.

With all these huge improvements, we expect the your next journey with Expedition will be easier.

Check out the step by step video series on Expedition on our YouTube channel. 

As an example, the series covers a Cisco ASA migration to Palo Alto Networks and discusses all these important steps:

• Add Palo Alto Networks device in Expedition and retrieve its contents
• Import base config from Palo Alto Networks device
• Obtain ASA config file and import it to Expedition
• Cleanup address and services objects
• Validate network configurations
• Validate security and NAT policy
• Merge configs and export the final config
• Load and commit the final config onto the Palo Alto Networks device

If you haven't installed Expedition yet, make sure to check out the tutorial video below on how to install Expedition:

For more information, sure to check out our Expedition page on LIVEcommunity.

NOTE: Expedition is supported by the community as best effort. The Palo Alto Networks TAC does not provide support, so please post your questions in the Expedition discussions forum.

Thanks for taking time to read my blog.

If you enjoyed this, please hit the Like (thumbs up) button, don't forget to subscribe to the LIVEcommunity Blog.

Stay Secure,
Kiwi out!