Migration from FTD 2110 HA pair to PA 3410 pair.

[HakunaMatata007]

Hello All,

We are about to Migrate from Cisco FTD 2110 HA Pair to PA 3410 HA. Can some one help out with the process. 

Does Expedition works well? if Yes what are the steps i need to do? Please let me know.

PA is completely new for us, please let me know what will be the way to do a smooth migration.

Thanks in advance.

[JayGolf]

Hi @HakunaMatata007 ,

I found a relevant discussion for FTD to PAN migrations. Hope this helps!

[dpuigdomenec]

Hi @HakunaMatata007 

Expedition can migrate FTD in ASA syntax. First you need to extract the config in ASA syntax and then running the workflow defined in above videos you will be able to migrate to PANOS.

• Expedition - Cisco ASA Migration to Palo Alto Networks: https://www.youtube.com/playlist?list=PLD6FJ8WNiIqVez8EBeoyRsnQcKTA5FuZ-
• Note that the migration will only apply to L4 rule objects. For more information, check here the support 3rd party migration matrix: https://live.paloaltonetworks.com/t5/expedition-articles/expedition-supported-3rd-party-vendor-matri...

Hope this helps,

David

[HakunaMatata007]

Thankyou for the response David @dpuigdomenec 

So what are the ways i can convert my FTD config file to ASA syntax file. Any info or steps that i need to do please.

Thankyou

[HakunaMatata007]

@JayGolf thankyou for the information.

[dpuigdomenec]

Hi @HakunaMatata007 

To be honest with you I didn't execute the commands as my customers did that for me.

Doing some google I found this article that maybe help: https://community.cisco.com/t5/network-security/how-show-running-configuration-or-startup-configurat...

On the other hand, I've escalated the question to my PS colleagues. I will let you know once I have a response.

Hope this help,

David