Multiple vsys migration from ASA to Palo Alto

[Bkrishnamoorthy]

We have purchased a pair of Palo Alto firewalls which will replace pair of multicontext ASA firewalls. We need to migrate  multi context configurations one by one to Palo Alto individual vsys. We have already used default vsys1 for ASA context1 , and we are trying to move another context2 to vsys2, but while we tried import the configuration, it's save on to default vsys. But we need to move to different vsys2. How to achieve it.

Since these firewalls will be managed from Panorama, we need to move all vsys configurations to Panorama in phases as we are migrating them one after one.

Panorama  

[TomYoung]

Hi @Bkrishnamoorthy ,

Here is a great discussion on the same topic -> https://live.paloaltonetworks.com/t5/general-topics/migration-import-of-configuration-only-to-a-dest....

It sounds like you already have your configuration file in XML format.  How did you generate it?

Thanks,

Tom

[Bkrishnamoorthy]

@TomYoung  thanks for your input, we generated .xml using expedition tool. after i imported the configuration in to the firewall, i am not able to see the saved configurations as you shared in the provided link, where can i get these list of saved configurations .

[TomYoung]

Hi @Bkrishnamoorthy ,

Thank you!  If you used Expedition for the migration, you can drag the config under vsys2 in Expedition under the Export tab.

Thanks,

Tom