About SureshBalaji

Hi Team,    Currently working on a PA migration 5060 to 5260. I tried to import the config in to the expedition tool, which  is exported from PA-5060 appliance. I found the below error on expedition. I also tried to import it after converting to zip file, which also throws an error saying that. "invalid XML    Could you please advise or help me convert the config from PA 5060 to PA 5260. Thank you,   With Regards, Suresh B       ... View more

Hi Team, we recently migrated from cisco ASA to Palo Alto 3220, where for one of the policy in cisco ASA has " access-list inside-egress extended permit ip any any", And this access-list is attached to the access-group to the interface "inside". as you can see below. "access-group inside-egress out interface inside" as per my understanding from cisco perspective for this access group the traffic which egresses out of the interface named "inside", should evaluate the against the access-list "inside-egress". The following are the access-list related to inside-egress.      access-list inside-egress extended permit icmp host 10.197.37.212 host 10.15.126.119 access-list inside-egress extended permit tcp host 10.16.17.9 host 10.15.4.84 eq 5707 log interval 1 access-list inside-egress extended permit ip any any   When it is converted to Palo Alto, for the " access-list inside-egress extended permit ip any any"  tool created a policy stating  Source zone - any, Source subnet- any to destination-subnet- any, destination-zone - "inside" with allow action.   Basically anything from anywhere were allowed to inside zone (which is dangerous wide open policy).   How we can rectify this, need your advise, for the access-group with "out" attached to the interface and having "permit ip any any" accesslist.         ... View more

Hi Team, Is there a we can migrate a PA 5050 multivsys configuration from one appliance and migrate it to two different 3220 appliances. Where Each Vsys from single PA 5050 goes to different 3220 appliance. For instance (Vsys1-PA 5050) should converted to one (PA 3220) and another (Vsys2 -5050) goes to second 3220 appliance.   ... View more

Hi Team, could you please tell us is there a way to perform migration from Huawei to 5250 Palo Alto. we are aware that the migration tool would not support from Huawei to Palo Alto. Is there any scripting or other automated way available ... View more