Migrating PA-3050 to PA-1420

[Kevin_Clark]

I'm attempting to use Expedition to merge the config from our PA-3050 (PAN-OS 9.1.x) into the config for a PA-1420 (PAN-OS 11.0.x). The problem is that the vsys1 components aren't transferring across.

Can anyone guide me through what I need to do to get this merge working in Expedition? Thanks in advance.

Base config: PA-1420_base.xml

Config to migrate: drfw_20240711.xml

After hitting the Merge button go to the Devices section and view the now updated PA-1420 config: It doesn't show the interfaces, virtual wires or virtual routers:

 

Those components are still shown in the config from the PA-3050 that I'm trying to migrate:

 

For the record this is a screenshot of the configs after I've imported them but before making any changes:

 

And this is a screenshot after I've dragged the components across just prior to hitting the Merge button:

 

[dpuigdomenec · Accepted solution]

Hi @Kevin_Clark 

Thanks for reaching out.

Expedition tool is intended to help on migrations from 3rd party vendors and also to optimise the security posture on a PANOS device.

The migration you are describing could be done using PANOS features as export and import from old to new devices (you may need to update networking information and VPN configuration). Once you have your configuration pushed to your new device you can download it to Expedition and do some optimisation like removing duplicates and merging similar policies among other features Expedition can help.

Said that, if you still want to use Expedition for that please check the file /tmp/error after doing the merge and share it with me using the email fwmigrate@paloaltonetworks.com

Hope this helps,

David

[Kevin_Clark]

Thanks, David. 

I'm pleased to report that the import of the config from our PA-3050 (PAN-OS 9.1.x) into our new PA-1420 (PAN-OS 11.0.x) was successful. Thank you for this recommendation. 

Kevin