How to import firewall config into expedition

[Kalemegdan]

HEllo

i want to use expedition to check firewall configuration instead of looking thru hml file.

Is it possible to import this config file (config.hml) inot expedition to see the firewall rules in GUI?

Appreciate if someone share a how-to steps..

Thanks

[Bagheri]

You can export your current firewall configuration into an XML file and then import it into Expedition, do all your modifcations and then create a new XML file and upload it back to your firewall.

[Kalemegdan]

Cool thank you.

I understand that byt my question is HOW?

I do have a firewall configuration that was exported from the firewall i have no access to so i cannot create  a new device since it asking me for a SN.

The only file i have is a config.hml file.

What is process to upload file to the expedition?

Do i use Projects Tab?

[Bagheri · Accepted solution]

You first creat a project.  Then when you entre the project, you can import configuration files from Cisco, Palo, Checkpoint, Juniper, etc.   What brand firewall are you migrating from?  Another Palo?  If so that is an XML file.  If Cisco, then a standard text file.

Go to this URL and select "Get the Files".  All the instructions are included.

https://live.paloaltonetworks.com/t5/Expedition-Migration-Tool/ct-p/migration_tool

[Kalemegdan]

Cool, thanks

[ram.balaji]

Hi Bagheri

I went to the given URL, but I couldn't find any "Get the file" option/link. Can you please share/post the link for the same. I want to convert fortigate firewall config to PA. I need to understand what files required to import into expedition tool, be it fortigate firewall or fortimanager.

If you can share the directory/path for all vendors required config file details that would be great as well.

[lychiang]

Hi @ram.balaji Please make sure you are running the latest Expedition, which is v1.2.60 , for export config instructions for fortinet, please refer to the below website:

https://pan.dev/expedition/docs/expedition_export/#fortinet

To import , simply create a project, the go into the project , go to import -> select fortinet , you then import the fortinet config there . 

[ram.balaji]

Thanks a lot, contains all vendors required config to be imported.