3050 to 3250 Hardware Upgrade

Justin.Abendroth · ‎09-08-2020

Hi,

I will be upgrading my 3050 firewall (managed by panorama) to a 3250 soon and am curious if there are any best practices guides out there moving from a 3050 to a 3250?

Thanks!

sellington · ‎09-15-2020

Hello,

Recently went through this same upgrade, I could not find a document catered specifically for a migration between these two particular devices, but the basics should mostly be the same as moving between other PA hardware platforms. I used this guide for putting together my basic plan.

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migrati...

A couple of quick notes, if you run HA, the port configs vary slightly, the 3250's do not have a dedicated copper HA2 port but instead move towards the HSCI port for HA2.

Additionally, if you follow the advice of ensuring they are on the exact same panOS release prior to moving over the config, make sure its a preferred release 🙂 I made the mistake of downgrading my 3250's to a panOS release matching my 3050's prior to the switch over and got hit by this bug in the next release, it was a rough day.

View solution in original post

Abdul-Fattah · ‎09-09-2020

Hi,

i do not think there is an offical guide for upgrading between PA Hardware Firewalls.

My advice most important both Firewalls should have same PAN-OS version when you export and import Config.

sellington · ‎09-15-2020

Hello,

Recently went through this same upgrade, I could not find a document catered specifically for a migration between these two particular devices, but the basics should mostly be the same as moving between other PA hardware platforms. I used this guide for putting together my basic plan.

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migrati...

A couple of quick notes, if you run HA, the port configs vary slightly, the 3250's do not have a dedicated copper HA2 port but instead move towards the HSCI port for HA2.

Additionally, if you follow the advice of ensuring they are on the exact same panOS release prior to moving over the config, make sure its a preferred release 🙂 I made the mistake of downgrading my 3250's to a panOS release matching my 3050's prior to the switch over and got hit by this bug in the next release, it was a rough day.

Justin.Abendroth · ‎09-15-2020

Thanks for the warning. I was planning on doing the same thing and would have hit that bug.

DarrinHarrison · ‎12-23-2022

My company is getting ready to implement this same upgrade from a 3050 HA environment to a 3250 HA environment. The instructions in this post are a couple of years old. Has this process changed any... is there a new better procedure?

Darrin Harrison