How to migrate configuration from 3200 series appliance to 5220.

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

How to migrate configuration from 3200 series appliance to 5220.

L2 Linker



Could you please help me to understand the procedure for how to migrate configuration from a 3200 series appliance to 5220.


Cyber Elite
Cyber Elite


The high level overview is:

  1. Make sure the 5220 is the same code version as the 3200.
  2. Export the 3200 config
  3. import config into the 5220
  4. make sure the 5220 is working correctly, policies, dynamic updates, HA, etc.
  5. Move cables from 3200 to 5220.



Cyber Elite
Cyber Elite


The really important step here is that to directly load the config on the new firewall and have all the stored phash values actually match, you'll need to actually know what you have the master key on your current device set to. Without matching the master key, the phash values stored within the configuration file won't match which will cause a bunch of different issues. 


The only other thing to really think about is the media differences of the interfaces, which may require that you utilize different interfaces for some of your connections. The 5220 is only going to have 4 copper Ethernet interfaces on ethernet1/1 through ethernet1/4, where your 3200 device had 8. The good news is that the XML is easy to directly edit if this is the case, as you can simply copy everything under the interface (IE: ethernet1/8) to whatever interface you actually require (IE: ethernet1/3). 

  • 2 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!