Vsys migration

[s.mousa451637]

Hello All, 

What is the best approach to migrate a Palo Alto firewall configuration with VSYS to another Palo Alto firewall (As is)?

[BPry]

@s.mousa451637,

What exactly are you doing? Moving from a device with multi-vsys to one that only has a single VSYS? Migrating an existing VSYS on a multi-vsys system to it's own independent hardware? 

[s.mousa451637]

Hi, I am moving 2 pa devices with 4 vsys to 2 pa devices also with 4 vsys, no changes in configuration (As it is migration)

I am asking about the fastest and smoothest way to do that and there any considerations ? 

[BPry]

@s.mousa451637,

This is a simple device migration then, nothing special for multi-vsys enabled systems when compared to a device with a single vsys. Export the device state from the existing hardware and import on the replacement hardware, this will work better if you have all of the hardware on the same PAN-OS version. You'll just need to account for any interface modifications that you will need to make to align for expected interface media (IE: if ethernet1/11 is expected to be copper and it's now an SFP interface, you'll either need to account for that or swap it over to the proper interface on the new hardware).