About a week ago, Palo Alto Networks released a fourth edition – and total rewrite – of their firewall migration tool, now called ‘Expedition’. This should vastly improve migration time and effort and make things a whole lot simpler when moving from another vendor’s firewall to Palo Alto Networks, while automating and implementing as much best practice policy as possible.
By using Expedition, you can convert a config from Checkpoint or Cisco or any other vendor to PanOS and benefit from gaining more time to improve results.
Migration Tool 3.0 had already added some functionalities to allow enforced security policies based on App-ID and User-ID. Expedition takes things one step further as Palo Alto Networks have added a Machine Learning module to help generate new security policies based on real log traffic, and introduced a Best Practices Assessment Tool to check the config complies with the best practices recommended by their security experts.
Here’s a look at the Expedition dashboard:
You can read more about the dashboard explanations here.
If you want more detailed functionality info, you can download V1 of the admin guide here:
PALO ALTO NETWORKS EXPEDITION ADMIN GUIDE
And if you’d like to download the Expedition migration tool itself, you should be able to do that here.
If your firewall migration to Palo Alto Networks is complex or you just don’t have the time in your schedule to carry it out yourself, you can always contact us at info@teneo.net where we’d be very happy to help!