Migration from Physical to VM series firewall

[deepak12]

Hi All ,

We are planning to move from on-premises to cloud .

Currently we are having physical devices and  we are checking possibilities how we can migrate to VM series firewall ?

Do we need to do config manually ? or is there anyway we can export/import the config  .If yes.. will it rake care pre-shared keys as well ?

[reaper]

you can export the named configuration file and import it into a VM.

your main concern will be making sure the interfaces line up, theIP addresses are set correctly (for dataplane and mgmt interfaces), and the NAT rules are set properly

[deepak12]

@reaper ,

Thanks for your help.

Just want to confirm for pre-shared keys..

So these also will be taken care during export/import to vm or do we need to manually configure it again after import.

[BPry]

@deepak12,

If you set the master key to the same value as you have on your physical equipment, the pre-shared will be perfectly fine following the import. If you don't know your current master key, the phash and pre-shared-key values will need to be updated before you do a commit as they won't match what you are expecting anymore. 

[reaper · Accepted solution]

The ipsec preshared keys, certs and password hashes will come along, if you're talking about the master key, as @BPry  mentioned; you'll need to input the correct password for the config hashes to be decrypted properly

[deepak12]

@reaper @BPry ,

Thanks a lot for your help .

Thanks..