Importing PA200 configuration to PA220.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Importing PA200 configuration to PA220.

L1 Bithead

We are planning to phase out PA200 firewall with PA220 .

PA200 firewall is running PAN OS 7.1.14.

PA 220 firewall comes preloaded with PAN OS version 8.0.X.

 

My concerns is, Can we directly import the firewall configuration  (device state) from PA200 to PA220 without any issue? 

Or do we need to upgrade the PA 200 first to 8.0.x and then export and import this config to new PA220?

2 REPLIES 2

Community Team Member

Hi @Nischal,

 

From the Firewall Migration Guide :

 

Determine the target PAN‐OS release — Before you Migrate to New Firewalls, ensure that the old firewall is running the same PAN‐OS release and the same content release version as is installed on the new firewall. If the old firewall does not support the PAN‐OS release that is installed on the new firewall, you must ensure that the old firewall is no more than one feature release behind.

 

You can find the entire guide on this page :

https://www.paloaltonetworks.com/documentation/platforms

 

Cheers !

-Kiwi

LIVEcommunity team member, CISSP
Cheers,
Kiwi
Please help out other users and “Accept as Solution” if a post helps solve your problem !

Read more about how and why to accept solutions.

Cyber Elite
Cyber Elite

@Nischal,

As @kiwi noted these need to be running the same version to properly perform the migration as you are planning. Of course, you could perform this migration without updating if you simply utilize the running-config.xml as a basis of re-creating the configurtation directly on the PA-220 instead of importing it. This would allow a chance to go through the entire configuration and verify that there are not any unneeded statements, as well as giving you a chance to properly test traffic before installing it. 

  • 4672 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!