Can the configuration be transferred between different PANOS via Expedition?

[mohammedsalhis]

Dear All

Is the configuration migration from Panos 9.x running on PA to another PA running 10.2.X doable for Expedition? or each of them must have the same version in order to migrate the Configuration using Expedition?

Best regards

[TomYoung · Accepted solution]

Hi @mohammedsalhis ,

Expedition supports multiple PAN-OS versions.  It is important to note that "The first PAN-OS configuration imported into the project will be assigned as Base Configuration." https://live.paloaltonetworks.com/t5/expedition-articles/expedition-user-guide-v1-2/ta-p/285157

I have not yet used Expedition to migrate from one PAN-OS to another, but it should be the same process that I have used multiple times to migrate from another vendor.

Just an FYI, I like to load the Day 1 Configuration on my new NGFW and import that as the base config.

Thanks,

Tom

PS There are some threads on this forum that say simply load the old PAN-OS config onto the new one, and it will automatically convert it.  I am curious if that will work.

[mohammedsalhis]

Hello Tom,

Just Noticed that the Certificate won't be migrated using Expedition.

regarding to (PS There are some threads on this forum that say simply load the old PAN-OS config onto the new one, and it will automatically convert it.  I am curious if that will work) should both have same OS version?

Thank you

[TomYoung]

Hi @mohammedsalhis ,

I have heard that, too.  I think you can load the older one onto the new one.  Please let us know if it works.

Thanks,

Tom

[mohammedsalhis · Accepted solution]

Hi @TomYoung 

should both be on the same PANOS version when loading the older one onto the new one?

Thanks

[TomYoung · Accepted solution]

No, try loading the older PAN-OS configuration onto the newer one.

[mohammedsalhis]

Many Thanks