Cisco ASA to Palo Alto migration issue

[Abdelhak]

Hi

i'm working on a new projet where will change the current Cisco ASA firewall by an Palo alto network 440 so we are using Expeditio tool to move the configuration

on the existing configuration, our customer use policy based routing to route trafic over both connexion (VPN & Internet) 

this parameter will be present on palo alto after expedition or we have to configure it manually ?

[OtakarKlier]

Hello,

The Palo Alto uses route based VPN's so you might need to reconfigure those separately.

Regards,

[SteveKrall]

Unless things have changed, migration tool does not create IPSEC tunnels. This is a manual process. PAN does support Policy Based Routing using the "Proxy ID" section. If you can convert to route based policies, I would recommend it.

[Abdelhak]

Could you help how can i configure the options requested options ?

[OtakarKlier]

Hello,

Which options, the VPN tunnels? What manufacturer is the other endpoint?

Regards,