Cisco Firepower Migraton for Palo Alto

[Muzammel]

Dear All,

We want to migrate Cisco fire power 4000 series to Palo Alto NGFW. Could you please let me know the best way to do this migration?

Thanks in advance!

Best Regards,

Muzammel Haque 

[Abdul-Fattah]

Hello,

you can use Palo Alto migration tool Expedition for details: 

https://www.paloaltonetworks.com/products/secure-the-network/next-generation-firewall/migration-tool

[Muzammel]

Hi Abdul-Fattah,

Thank you for your prompt suggestions. I have downloaded following file 

- ExpeditionVM-1.1.10.ova and 

- Expedition.tgz

Do I need both the files or ExpeditionVM-1.1.10ova is enough. May I request you for any doc's?

Thanks & Regards,

Muzammel Haque

[azuniga]

Hello,

For installation there is a video created on the expedition forums demonstrating how to perform this function, you can watch the video here ( https://live.paloaltonetworks.com/t5/expedition-migration-tool/ct-p/migration_tool ), also there are guides listed from that link as well.

As for the Cisco FirewPower migration the expedition tool will not migrate over the layer 7 policies but only the layer 3/4 policies so you will need to export the configuration with the asa format for conversion.

[Muzammel]

Hi,

Thanks for your reply. Someone told me there is a separate tools for migrating Cisco Fire Power to Palo Alto, but I am not sure. Is there any specific migration tools for fire power?

Best Regards,

Muzammel Haque

[azuniga]

For layer 7 migration policies we offer no tool. But for cisco ASA configurations the expedition tool will work fine.

[HemanthV]

Hi 

i am also planning to migrate cisco firepower 2130 to palo alto 5500 series firewall 

when i download the migration tool in the ubuntu as per suggested document 

we are getting apache2 ubuntu default page 

can anyone help us how to solve this issue 

[azuniga]

Hello @HemanthV 

I believe I answered this on another thread, we will use that one for your answer.