10-03-2018 06:22 AM
Is it possible to convert (migrate) a SonicWALL NSA3600 configuration to a PA 220?
Using Expedition 4.0?
Other method?
Thanks
10-03-2018 08:00 AM
No and yes.
Expedition doesn't have a direct convertion for Sonicwall, but you can do it through the Machine Learning module. Personally what I would recommend is that you actually take a look at your Sonicwall configuration and manually rebuild the policies on the Palo Alto. The issue with migrations, at least to me, is that you have to spend a large amount of time going back through and 'Palotizing' the configuration once everything is up and running.
I personally find simply rebuilding the configuration, in a Palo centric manner, to be drastically easier and overall faster then using any of the migration assistants.
10-04-2018 08:55 AM
Hello,
I agree with @BPry, I usually rebuild from scratch since you are going from a traditional layer3 firewall to a layer 7. Build the policies as layer 3/4 and then build you more specific ones above those to make sure the new layer 7 policies are getting hit. Then start removing the layer3/4 traditional rules.
It is a process and not an easy one at that. But its worth it in the end.
Regards,
10-03-2018 08:00 AM
No and yes.
Expedition doesn't have a direct convertion for Sonicwall, but you can do it through the Machine Learning module. Personally what I would recommend is that you actually take a look at your Sonicwall configuration and manually rebuild the policies on the Palo Alto. The issue with migrations, at least to me, is that you have to spend a large amount of time going back through and 'Palotizing' the configuration once everything is up and running.
I personally find simply rebuilding the configuration, in a Palo centric manner, to be drastically easier and overall faster then using any of the migration assistants.
10-04-2018 08:55 AM
Hello,
I agree with @BPry, I usually rebuild from scratch since you are going from a traditional layer3 firewall to a layer 7. Build the policies as layer 3/4 and then build you more specific ones above those to make sure the new layer 7 policies are getting hit. Then start removing the layer3/4 traditional rules.
It is a process and not an easy one at that. But its worth it in the end.
Regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
