Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Migrating config from PA -500 to pa 220

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Migrating config from PA -500 to pa 220

L3 Networker

I

Hi,

Planning for upgrading PA-500 to PA-220, Just wanted to be sure that if we download the current running config from PA-500 and import it to new PA-220 device, will that work? 
I am not sure if Importing configurations between non-matching hardware versions works in this case,according to this

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaOCAS

 Is there a way to do so or needs to be configured manually?

 

 

and is this the best approach 

 

https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migrati...

 

?

1 accepted solution

Accepted Solutions

Cyber Elite
Cyber Elite

The most important  consideration are supported features and interface types

The pa-220 and pa-500 have the same interfaces, so that won't cause any issues

Feature wise, there is not a big leap between the pa-220 and pa-500 so that should not be a an issue either

 

make sure both devices are on the same PAN-OS (8.1) and content packages when migrating the config to prevent conflicts

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

3 REPLIES 3

Cyber Elite
Cyber Elite

The most important  consideration are supported features and interface types

The pa-220 and pa-500 have the same interfaces, so that won't cause any issues

Feature wise, there is not a big leap between the pa-220 and pa-500 so that should not be a an issue either

 

make sure both devices are on the same PAN-OS (8.1) and content packages when migrating the config to prevent conflicts

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

Hello,

As Reaper mentioned, its a straight forward process. I would suggest that the two devices be on the same code version so it doesnt cause any weirdness. But basically exporting the config from the old device and importing into the new.

 

Done it a few times.

 

Regards,

has 8 interfaces 🙂

  • 1 accepted solution
  • 6341 Views
  • 3 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!