Expedition: Palo Alto Networks Migration Tool 4.0

May 29, 2018

About a week ago, Palo Alto Networks released a fourth edition – and total rewrite – of their firewall migration tool, now called ‘Expedition’. This should vastly improve migration time and effort and make things a whole lot simpler when moving from another vendor’s firewall to Palo Alto Networks, while automating and implementing as much best practice policy as possible.

By using Expedition, you can convert a config from Checkpoint or Cisco or any other vendor to PanOS and benefit from gaining more time to improve results.

Migration Tool 3.0 had already added some functionalities to allow enforced security policies based on App-ID and User-ID. Expedition takes things one step further as Palo Alto Networks have added a Machine Learning module to help generate new security policies based on real log traffic, and introduced a Best Practices Assessment Tool to check the config complies with the best practices recommended by their security experts.

Here’s a look at the Expedition dashboard:

Palo Alto Networks Expedition Dashboard

You can read more about the dashboard explanations here.

If you want more detailed functionality info, you can download V1 of the admin guide here:



And if you’d like to download the Expedition migration tool itself, you should be able to do that here.

If your firewall migration to Palo Alto Networks is complex or you just don’t have the time in your schedule to carry it out yourself, you can always contact us at info@teneo.net where we’d be very happy to help!

Contact us - We’d love to help you

    Teneo collects your personal data when you complete our online forms. We will use this information to provide an accurate response to your questions or requests and we will keep a record of your form completion in our CRM system. By submitting this form, you agree to us contacting you for the purpose of our response. For more information explaining how we use your personal data, please see our Privacy Policy.