Checkpoint VSX to Palo Alto Vsys Migration

[vdemo-user]

Hi Team,

I am working on a project where Checkpoint Firewall VSX environment is to be migrated on Palo Alto’s Vsys environment.

All the Palo Alto firewalls will be managed by PANORAMA. Checkpoint's Version is R80.40

Can anybody help me share the exact steps, using expedition tool.

I have some queries regarding expedition tool which are given below:

1. What will be the extra steps, which I need follow for Checkpoint’s VSX to Palo Alto’s V-sys environment in compare of normal migration (without virtual firewalls).
2. As we need to use a “base configuration file”  in expedition, on which we will import and merge checkpoint’s config file.

So for this purpose I need to fetch “base configuration file” from PANORAMA or directly from firewalls?    ............ and what will be the steps for it ?

[azuniga]

Here is a video on an export and merger that may help you. The base configuration for panorama will be what you export from panorama at the time of the merger and hopefully all of the configurations are on panorama at the time and they push the templates to the adjacent firewalls, because most of the configurations should be saved to panorama the firewalls themselves may not have any configurations on them so yes you would likely use the panorama configuration.

https://www.youtube.com/watch?v=RMHfO4MA0jw&list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-&index=8