Palo Alto Upgrade-migration from 5050 ( HA ) to 5220 ( HA ) recommendations
Palo Alto Upgrade-migration from 5050 ( HA ) to 5220 ( HA ) recommendations
Hello good afternoon, first of all, thank you for your cooperation.
I have the following question regarding a migration.
Firewall source PA-5050 version 8.1.X ( HA ), configuration, with destination to 5220 HA, with PAN-OS 10.1.X ( recommended version of 10.1.X ).
Now I have the following doubt, what is recommended for the upgrade.
-To take the config of 5050, export and load config in the PA-5220, adjust, but the 5220 to have it first in PAN-OS 9.1.X, and after having the config, move it to 10.0 and then finally to 10.1, thinking about the correct conversion of configurations ?
-Or do you recommend to take the 5050 config, pass it to the 5220 and adjust it, but already with the 5220 firewall in version 10.1.X (PAN-OS 10.1.X recommended)?
What do you suggest is the best option ? what is your opinion, suggestion, proposal and / or recommendation or any other tips and / or input.
Thanks
I remain attentive to your comments
Best regards
Hello @Reaper
And added to the last answer. Thinking about Expedition. Will it be possible also, a possible option, to take the 5050 config in 8.1. Upload it to Expedition and also upload a clean version of 10.1.X to Expedition as Base Config, and do merge to have a final 10.1.X file, based on the 8.1.X config. Then export from Expedition and upload and upload to the 10.1.X firewall ?
I remain attentive, thank you, best regards.