07-10-2023 08:00 PM
This is what I would try first. Disable HA on one firewall and save the candidate config as a named xml file. Do not commit the change. Revert to running after you have the config file. Export the file and open in a text editor like Notepad++. You will see in the first 5 lines of code a reference to your 8.1.x version of code. Change this to 10.2.0 and save the file. Then import the file to the new hardware, load named config and commit. Then configure HA manually. Palo changed the naming convention for HA ports so your PA-5000 will reference interfaces that do not exist on a PA-3400 and commit will fail. One other option is the cli command "load config partial". But editing the version number in the xml is the easiest and fastest method.
