Hi @LCMember4017 Right now I can think of two possibilities PaloAlto Migration Tool Manually merging the XML Configuration files Actually I am not totally sure about possibility 1 with the migration tool so personally I would manually merge the config files. It actually shouldn't be a big deal, cause you can copy the templates and device groups from the configuration of your m100 into the corresponding place in the vm configuration. If you use them, you have to make sure that you also merge all the globally shared objects. This will probably be the biggest task and may be even better if you configure all of them on both panoramas before you start. And if you also have certificates with private keys, accounts including passwords and or other configuration which some data is stored encrypted (e.g. RADIUS Server profiles) in the templates, you have to configure the same master keys on both panorama appliances. If you do this correctly, the firewalls will still be in sync after you change them from the m100 to the vm panorama. Hope this helps. Regards, Remo
... View more