1. Policy profiles a. enable applications (one day to enable) i. tweak applications (several days at least, maybe two weeks at most) ii. wait until stability achieved b. enable antispyware (one day to enable) i. tweak (one day, maybe several days at most) ii. wait until stability achieved c. enable threat prevention (one day to enable) i. tweak (one day, maybe several days at most) ii. wait until stability achieved d. enable URL Filtering (domain migration should be complete before proceeding) i. add one/two categories at a time (one day to enable) 1. tweak (one or two days, but if receiving complaints one or two weeks) 2. wait until stability achieved ii. add one/two categories (create custom URL Category if necessary) 1. tweak (one or two days, but if receiving complaints one or two weeks) 2. wait until stability achieved iii. Repeat until all categories added and stability achieved (process may take weeks/months) A procedure doesnt exist, or at least I could not find one, in converting a compnany from your conventional FW to a PA. This article touches on adding URL, Threat, and Antispyware, which I still need more time to evaluate this procedure. Please reply if you have any suggestions or a better process.
... View more