Migration FROM PA-850 to PA-3220

[Metgatz]

Dear:

Good afternoon, what is the best migration option from a Palo Alto PA-850 to a PA-3220.

Thinking for example to be able to keep the self-signed certificates in the PA-850, used for Global Protect.

Based on your expertix and experience, what is the best way to approach this migration.

I remain attentive, thank you very much.

Best regards

[TomYoung]

Hi @Metgatz ,

This is what I do:

1. Configure the licenses, software, and dynamic updates to match on the new firewall.
2. Export and import the certificates.
3. Export and import the config.

That's it!

I have never played with exporting and importing the device state.  That may include the certificates as well.

Thanks,

Tom

PS If you are looking for something a lot more detailed, check this out -> https://docs.paloaltonetworks.com/content/dam/techdocs/en_US/pdf/hardware/migration/firewall-migrati....