Migration from Panorama M-500 to M-700 - Feedback/Input

[JRichardson2]

I am in the process of planning the best way to approach my Migration from Panorama M-500s to Panorama M-700s.  

I currently have 2 Panorama M-500s in HA, and 2 M-500s as dedicated log collectors.

I have my M-700s setup in the DCs and trying to figure out the best and easiest way to get this migration completed. The 700s Panoramas now have different IPs so that I can get to them and do some of the initial configuration.

I have my Intermediate Virtual Appliance up as well.  That I will use b/c you cant migrate directly from m-500 to m-700.

1.) on the day of migration, should I just shut down the m-500 Pans and import the config to the m-700s, that way it update the mgt ip and all config to that of the m-500s?

2.) or should I edit the named-config.xml to keep the different ip on the m-700s?  but I would have to do alot of backend work with updating in alot of places to the new Panorama IPs.

If anyone could provide the experience with their migration, it would be greatly appreciated.  Thanks.

[PavelK · Accepted solution]

Hello @JRichardson2

thank you for post!

I have done similar migration in the past and have written post about it: Panorama migration from M-100 to M-200 and I have commented one migration post as well: Panarama migration M-100 to M-200. Even though both posts are related to different Panorama model and older PAN-OS version the logic and migration remains the same. Could you please review these posts to see it can help you?

Coming back to your post, personally I prefer option No.1. It is less work and easier roll back to re-use the same IP addresses.

Kind Regards

Pavel 

[JRichardson2]

@PavelK Thank you for your response.  That really helps!