Migration of VMWare On-Prem Panorama to Azure Panorama

Good Day Team,

I wondering if anyone has done this mirgration from an on-prem VMWare Panorama to an Azure ( this will need to be built/spin up in the enviroment).

What are the processes / proceedures or any issues that may arise. Is it the case of backing up the current config , import to the new Panorama in Azure , change the management ip and start to point/configure the new ip to the Firewalls to start management again ?

Many thanks in advance

Regards

3 comments

Comments (3)

ZeroTrust

Jul 26

Ok , i think i found an article that explains most of the questions raised here.

https://docs.paloaltonetworks.com/panorama/10-2/panorama-admin/set-up-panorama/transition-to-a-different-panorama-model/migrate-a-panorama-virtual-appliance-to-a-different-hypervisor

Reaper

Sep 07, 2023

If they're already fully managed (with little to no local config, but most importantly no overrides) this is a pretty easy process

Spin up the new panorama, add licenses, import the config, ensure connectivity is ok, move panorama panorama targets, commit from new panorama

If you so have overrides, you need to do the "import to local > import into panorama > send config bundle replacing all local config" shuffle

ZeroTrust

Jul 26

Replying to

Thank you Reaper , much appreciated. Applogies for late reply as the project was on and off.

Now that its set in motion and live in Azure , will need to figure out registering the new Azure licensing.From what the vendor as mentioned in Azure for Panorama Market Place it the requirement of BYOL , and can transfer the licensing of the Exisiting Vmware to the new Azure Panorama (someting will figure out as well on the Customer Support Portal, Howver is this a onetime thing and still not have a grace period of still using the old Panorama for a few days should we roll back.?)

Most of the firewall are managed from Panorama , they are a few firewall sections that have overide , like Device>Setup etc (will figure out the improt local , send config bundle( , does this also means that manual templates and device Groups need to be setup in Panorama ? for device imports route? )

Thank you in advance.

Regards

Forum: Forum