Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
08-13-2024 11:08 PM
What would be the best approach for migrating the OpenBDS firewall?
In a scenario where there are 4 units of OpenBDS and consolidating into 2 units of Palo Alto.
Would the Expedition tool able to merge the policies?
Any other things to note for the migration?
Please advise.
08-14-2024 01:44 AM - edited 08-14-2024 01:45 AM
Hello,
From this document i would say that OpenBDS isn't compatible.
https://pan.dev/expedition/docs/
For the migration, it depends of the configuration and your architecture.
There isn't one only way to migrate. My opinion, install the Palo Alto firewall on the network. You can deploy the firewall in TAP/vwire mode in order that the firewall can log all the trafic. That will allow you after one month to create your policies based on application and not based on ports. Other way, you prepare the network migration and the policies before (1 to 1). The D Day, you have to shut your firewall and commit the new network configuration on Palo Alto firewall. With this method, you can migrate to an App-ID-Based Security Policy after the migration.
Best regards,
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
