Proxy SG to Palo alto policy migration

[tbanerjee]

Hi,

Is there any automation tool through which we can migrate all our proxy SG policy rule, object and object group to Palo alto. Or else if there is any alternate option then please let me know.

[OtakarKlier]

Hello,

Not sure what SG stands for, however if you are looking to migrate the configuration of another vendors firewall to Palo Alto, check out the Expedition tool.

https://live.paloaltonetworks.com/t5/expedition/ct-p/migration_tool

Regards,

[tbanerjee]

Hi,

Thanks for the reply. But it's not a firewall device. It's a bluecoat proxy device . And we are planning to remove the proxy from our environment and migrate all the policy to Palo Alto device . But right now many rules are there in different layer of the proxy device . So can you please confirm wheather we can migrate those policy through expidition ? 

[OtakarKlier]

Hello,

Sorry I dont know. Perhaps someone else might. Or you can open a support case.

Regards,

[BPry]

@tbanerjee,

To the best of my knowledge ProxySG can't be migrated in the Expedition tool. This is one that you might just have to rebuild using your existing ProxySG configuration as a baseline. 

[Mo2ThaJo]

How did you migrate your ProxySG rules to Palo Alto?

[kiwi]

Hi @Mo2ThaJo ,

As far as I know proxySG is not yet a supported vendor to be used with Expedition (Migration Tool).  So likely a manual process.

https://live.paloaltonetworks.com/t5/expedition-articles/expedition-supported-3rd-party-vendor-matri...

Kind regards,

-Kim.