Firewall already registered and upgrade path

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Firewall already registered and upgrade path

L4 Transporter

Hello we have got a customer and they have purchased 5 X PA1400 series 


Customer has CSP account and he registered one PA and it went well


but when he tried to register 2nd PA , it shows This serial number is already registered .


How is this possible ? Is this related to any Auth code or something ?


Secondly , customer has PA 3200 series which is EOL and now they want to have their policies moved to PA1400


PA 1400 comes with 11.x installed .


So what is the best approach to migrate ;


Can we directly import xml from PA 3200  to PA 1400 or 


Do we first downgrade PA 1400 > upload the xml and then upgrade ?




Cyber Elite
Cyber Elite

Hi @FWPalolearner ,


The S/N should not be already registered for a brand new NGFW.  You would need to reach out to PANW support.  It is not related to the auth code.


With regard to moving the configuration, yes, you can export and import. You said PA-3200 above, which is not EoL.  If you meant PA-3000, then it will be more difficult because the PA-3000 max PAN-OS is 9.1 and the PA-1400 minimum PAN-OS is 11.0.


You could try export and import from PA-3000 to PA-1400, but I am not sure how it will go.


For the PA-3200 to PA-1400, I would follow this process:


  1. Upgrade PA-3200 to 11.1.  See URL above.
  2. Verify the 10G SFP+ interfaces on the old and new models.  Some SFP slots are 1G only, and these are different between the models.(See URLs below.)
  3. Export the XML from the PA-3200.
  4. If the 10G interfaces needs to move on the new NGFW, search and replace in the XML is easiest.
  5. Import the XML into the new NGFW.  Modify the management interface back before committing.





Help the community: Like helpful comments and mark solutions.
  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!