07-08-2020 08:50 AM - edited 01-21-2022 10:32 AM
Expedition supports migration sections of the below Vendor's configuration to PAN-OS configuration
**The list of tested Vendor OS version, version not listed here needs further validations
***Juniper VPN configuration conversion will be supported in Expedition 2.x
Table1: Expedition supports converting 3rd Party vendors config sections (Updated on 2021/01/5)
Note: Table will be updated when new support added
Vendor |
Supported Vendor OS** |
Global Address Object |
Address Objects |
Address Group Objects |
Service Objects |
Service Group Objects |
Security Policy |
NAT Policy |
Network Interface (L3 only) |
Routing(Static Routes Only) |
VPN |
Checkpoint |
R75,R77 |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|
> R80 |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
||
Cisco |
ASA 9.0, 9.1,9.6,8.2,8.4, |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
FirePower [only in ASA syntax] |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
||
Fortinet |
Fortigate 4.0, 5.0,6.0 |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|
IBM XGS |
5.1 |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
||
Juniper |
All Netscreen Firewalls (ScreenOS) |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ *** |
Junos 11.4, 12.1, 12.3 |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ *** |
|
Forcepoint |
Sidewinder |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
|||
Stonesoft |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
✔ |
Hi,
In my memories, there are some migration guide for these 3rd party devices, but I can't find it now.
Is there anyone have the link?
What I had downloaded before is "Forcepoint Sidewinder Migration Guide.pdf"
Thanks.
For Stormshield you can export the rules and objects in CSV and then use Expedtion to import these CSVs and build your configuration.