DOCUMENT LIBRARY

online help

About FortiConverter
- Supported vendors & configuration objects
- General limitations
- Licensing
What's new
Installation
- System requirements
- Activating the license
- Enabling remote connections
Alcatel-Lucent Conversion
- Saving the Alcatel-Lucent source configuration file
- Alcatel-Lucent conversion wizard
Bluecoat Conversion
- Saving the Bluecoat source configuration files
- Bluecoat conversion wizard
- Bluecoat start options
- Bluecoat conversion result
Check Point Conversions
- Saving the Check Point source configuration file
- Check Point conversion wizard
- Check Point NAT merge examples
Cisco Conversions
- Saving the Cisco source configuration file
- Cisco conversion wizard
FortiGate Configuration Migration
- Fortinet conversion wizard
- Fortinet Import Wizard
  - Import converted configuration to the device
  - Restore imported configurations to other devices
- Fortinet Bulk Conversion
  - The Interface Mapping page
  - The Bulk Conversion Summary page
Huawei USG Firewall Conversion
- Saving the Huawei source configuration files
- Huawei conversion wizard
- Huawei Start options
- Source Preview
- Huawei Interface mapping
- Huawei Route Information
- Huawei Conversion result
Juniper Conversions
- Saving the Juniper source configuration file
- Juniper conversion wizard
McAfee Sidewinder Conversion
- Saving the McAfee source configuration file
- McAfee conversion wizard
Forcepoint Stonesoft Conversion
- Saving the Stonesoft source configuration files
- Stonesoft Conversion Wizard
- Stonesoft Start options
- Source Preview
- VDOM Mapping Section
- Stonesoft Interface mapping
- Stonesoft Route Information
- Stonesoft Conversion result
Palo Alto Networks Conversion
- Saving the PAN source configuration files
- Palo Alto conversion wizard
Snort Conversion
- Snort conversion wizard
SonicWall Conversion
- Saving the SonicWall source configuration file
- SonicWall conversion wizard
Sophos Conversion
- Saving the Sophos source configuration files
- Sophos conversion wizard
Tipping Point Conversion
- Saving the Tipping Point source configuration file
- Tipping Point conversion wizard
Vyatta Networks Conversion
- Saving the Vyatta source configuration files
- Vyatta conversion wizard
WatchGaurd Conversion
- Saving the WatchGuard source configuration files
- WatchGuard conversion wizard
- WatchGuard Start options
- Source Preview
- WatchGuard Interface mapping
- WatchGuard Route Information
- WatchGuard Conversion result
Tuning the output
- Manage your firewall objects
- Copy an object to another VDOM
- Copy an object's CLI configuration
- Output an unreferenced object
- Rename an object
- Merge duplicate objects
Bulk Conversion
Compare Two Conversions
Connecting FortiGate devices
REST API Import for 3rd Party Vendors
Viewing the results of your automatic conversion
Error Messages
Importing your new configuration into FortiGate
Importing your new configuration into FortiManager
- Working with object output in indexed files
Troubleshooting
- Licensing Issues
- Accessing conversion logs
- Troubleshooting application crashes
- Reviewing errors after FortiGate import
Appendix
- Adjusting table sizes
- NAT merge options
- Add a new folder

Home FortiConverter Tool 6.0.0 online help

6.0.0

Supported vendors & configuration objects

FortiConverter can translate configurations from the following vendors and models.

In some cases, FortiConverter can't translate some parts of the configuration because of dependencies or unsupported syntax and you must manually convert them.
If the number of objects exceeds the maximum valid length for FortiGate or FortiManager, FortiConverter trims them.

Unless noted as an exception below, conversions only support IPv4 unicast policy.

Vendor	Models	Versions	Convertible Objects
Alcatel-Lucent	Brick	ALSMS v9.x	Interface (physical, logical, loopback, PPPoE) Addresses & Address Books Partitions Services & Service Books Static Routes Zone rule set
Bluecoat	SGOS	6.5.10 6.7.4	Addresses & Address Groups Proxy Address (group) Service Proxy Policy
CheckPoint	SmartCenter	NGFP1 (4.0) to NGX R80	Interface Addresses & Address Groups Local Users & Groups NAT Negate Cell Policies (rulebases.fws/.csv) RADIUS, TACACS+, LDAP Rules (rulebases.fws/.csv) Schedules Services & Service Groups Static Routes VPN communities (IPSec site-to-site)
CheckPoint	Provider-1	NGX R65 to R80
Cisco	ASA	7.x/8.x/9.x	Interface ACLs Addresses & Address Groups DHCP Servers DNS Servers DNS Servers Interfaces IPPools Local Users & Groups NAT RADIUS, TACACS+, LDAP Services & Service Groups Static Routes VPN SSLVPN (ASA only)
	FWSM	3.x/4.x
	IOS	10.x to 12.x 15.x
	PIX	5.x/6.x/7.x/8.x
	IOS XR	4.x/5.x/6.x	Addresses & Address Groups & FQDNs Interface IP Pools Policies Services & Service Groups Static Routes
	Nexus	5.2/6.x/7.x
FortiGate	FortiOS	FOS5.2 and above	FortiGate configuration can be converted based on the version of the target FortiGate device (We suggest to migrate to FortiOS 6.0 and above). However, note that Older features might be deprecated and may not be fully converted over. The review is necessary. After importing the converted configuration, any CLI commands that have not successfully imported can be reviewed on the page.
Huawei	USG Series		Interface Zone Addresses & Address Groups Services & Service Groups Policy Route Zone IPSec Policy (VPN) Security Context Nat Policy (SNAT) Nat Server (VIP)
Juniper	SSG/ISG	ScreenOS 4.x, 5.x, 6.x	Addresses & Address Groups & FQDNs DHCP Servers & Clients & Relays Interfaces Static Routes Services & Service Groups Policies VIPs/MIPs NAT IP Pools VPN Local Users & Groups RADIUS & LDAP Zones
	SRX	JunosOS 10.x to 18.x	Addresses & Address Groups & FQDNs DHCP Servers & Client & Relay Interfaces IP Pools Local Users & Groups NAT Policies RADIUS & LDAP Services & Service Groups Static Routes VIPs/MIPs VPN (IPSec site-to-site) Zones Routing-instances (virtual-router)
	MX	Juno OS 10.x to 12.x	Addresses & Address Groups & FQDNs Interfaces IP Pools Policies Services & Service Groups Static Routes
McAfee	Sidewinder	7.x, 8.x	Addresses & Address Groups & FQDNs Interfaces IP Pools Policies Services & Service Groups Static Routes
Forcepoint	Stonesoft	5.7	Addresses & Address Groups Interfaces Policies/ Sub-policy Alias Services & Service Groups Static Routes NAT
Palo Alto Networks	PAN OS	PAN-OS 1.x to 8.x	Addresses & Address Groups & FQDNs Interfaces Local Users & Groups NAT Policies Schedules Static Routes Services & Service Groups Zones VPN Panorama
Snort			IPS rules
SonicWall	TZ Series NSA Series	SonicOS 4.x, 5.x, 6.x	Addresses & Address Groups & FQDNs DHCP Servers & Clients & Relays Interfaces Local Users & Groups NAT Policies Schedules Services & Service Groups Static Routes Zones VPN (IPSEC site to site) SSLVPN
Sophos	XG Series	SFOS 17.0	Interface Zone Addresses & Address Groups Service & Service Groups Users & User Groups Policy
Sophos	Cyberoam	Cyberoam OS 10.6
Tipping Point	IPS	4.5	Addresses & Address Groups Policies Services & Service Groups
Vytta	VyOS	5.2 to 6.7	Interface Zone Addresses & Address Groups Services & Service Groups Policy Route
WatchGuard	Firebox Series XTM Series	Fireware 11.3 to 12.1	Interfaces Addresses & Address Groups Services & Service Groups Policies Static Routes

Exception

Check Point to FGT conversion can support IPv4 multicast policy.
Check Point, Cisco, and Juniper (Junos only) to FGT conversion can support IPv6 unicast policy.
Juniper (Junos only) can support converting the consolidated policy to FortiOS v6.2 configuration.

Supported vendors & configuration objects

FortiConverter can translate configurations from the following vendors and models.

In some cases, FortiConverter can't translate some parts of the configuration because of dependencies or unsupported syntax and you must manually convert them.
If the number of objects exceeds the maximum valid length for FortiGate or FortiManager, FortiConverter trims them.

Unless noted as an exception below, conversions only support IPv4 unicast policy.

Vendor	Models	Versions	Convertible Objects
Alcatel-Lucent	Brick	ALSMS v9.x	Interface (physical, logical, loopback, PPPoE) Addresses & Address Books Partitions Services & Service Books Static Routes Zone rule set
Bluecoat	SGOS	6.5.10 6.7.4	Addresses & Address Groups Proxy Address (group) Service Proxy Policy
CheckPoint	SmartCenter	NGFP1 (4.0) to NGX R80	Interface Addresses & Address Groups Local Users & Groups NAT Negate Cell Policies (rulebases.fws/.csv) RADIUS, TACACS+, LDAP Rules (rulebases.fws/.csv) Schedules Services & Service Groups Static Routes VPN communities (IPSec site-to-site)
CheckPoint	Provider-1	NGX R65 to R80
Cisco	ASA	7.x/8.x/9.x	Interface ACLs Addresses & Address Groups DHCP Servers DNS Servers DNS Servers Interfaces IPPools Local Users & Groups NAT RADIUS, TACACS+, LDAP Services & Service Groups Static Routes VPN SSLVPN (ASA only)
	FWSM	3.x/4.x
	IOS	10.x to 12.x 15.x
	PIX	5.x/6.x/7.x/8.x
	IOS XR	4.x/5.x/6.x	Addresses & Address Groups & FQDNs Interface IP Pools Policies Services & Service Groups Static Routes
	Nexus	5.2/6.x/7.x
FortiGate	FortiOS	FOS5.2 and above	FortiGate configuration can be converted based on the version of the target FortiGate device (We suggest to migrate to FortiOS 6.0 and above). However, note that Older features might be deprecated and may not be fully converted over. The review is necessary. After importing the converted configuration, any CLI commands that have not successfully imported can be reviewed on the page.
Huawei	USG Series		Interface Zone Addresses & Address Groups Services & Service Groups Policy Route Zone IPSec Policy (VPN) Security Context Nat Policy (SNAT) Nat Server (VIP)
Juniper	SSG/ISG	ScreenOS 4.x, 5.x, 6.x	Addresses & Address Groups & FQDNs DHCP Servers & Clients & Relays Interfaces Static Routes Services & Service Groups Policies VIPs/MIPs NAT IP Pools VPN Local Users & Groups RADIUS & LDAP Zones
	SRX	JunosOS 10.x to 18.x	Addresses & Address Groups & FQDNs DHCP Servers & Client & Relay Interfaces IP Pools Local Users & Groups NAT Policies RADIUS & LDAP Services & Service Groups Static Routes VIPs/MIPs VPN (IPSec site-to-site) Zones Routing-instances (virtual-router)
	MX	Juno OS 10.x to 12.x	Addresses & Address Groups & FQDNs Interfaces IP Pools Policies Services & Service Groups Static Routes
McAfee	Sidewinder	7.x, 8.x	Addresses & Address Groups & FQDNs Interfaces IP Pools Policies Services & Service Groups Static Routes
Forcepoint	Stonesoft	5.7	Addresses & Address Groups Interfaces Policies/ Sub-policy Alias Services & Service Groups Static Routes NAT
Palo Alto Networks	PAN OS	PAN-OS 1.x to 8.x	Addresses & Address Groups & FQDNs Interfaces Local Users & Groups NAT Policies Schedules Static Routes Services & Service Groups Zones VPN Panorama
Snort			IPS rules
SonicWall	TZ Series NSA Series	SonicOS 4.x, 5.x, 6.x	Addresses & Address Groups & FQDNs DHCP Servers & Clients & Relays Interfaces Local Users & Groups NAT Policies Schedules Services & Service Groups Static Routes Zones VPN (IPSEC site to site) SSLVPN
Sophos	XG Series	SFOS 17.0	Interface Zone Addresses & Address Groups Service & Service Groups Users & User Groups Policy
Sophos	Cyberoam	Cyberoam OS 10.6
Tipping Point	IPS	4.5	Addresses & Address Groups Policies Services & Service Groups
Vytta	VyOS	5.2 to 6.7	Interface Zone Addresses & Address Groups Services & Service Groups Policy Route
WatchGuard	Firebox Series XTM Series	Fireware 11.3 to 12.1	Interfaces Addresses & Address Groups Services & Service Groups Policies Static Routes

Exception

Check Point to FGT conversion can support IPv4 multicast policy.
Check Point, Cisco, and Juniper (Junos only) to FGT conversion can support IPv6 unicast policy.
Juniper (Junos only) can support converting the consolidated policy to FortiOS v6.2 configuration.

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Unified SASE

Single Vendor SASE

Cloud Network Security

Secure Endpoint Connectivity

Web Application / API Protection

Security Operations

Security Operations Automation

Identity

Early Detection & Prevention

Secure Networking

Hybrid Mesh Firewall

NOC Management

LAN

WAN

Communication & Surveillance

Unified SASE

Single Vendor SASE

Secure Endpoint Connectivity

Cloud Network Security

Cloud-Native Security

Web Application / API Protection

Security Operations

Security Operations Automation

Endpoint

Data Protection

Identity

Email

Early Detection & Prevention

Expert Services

Edge Firewall

Orchestration & management

SD Branch

Application Delivery

Single Vendor SASE

Secure Endpoint Connectivity

Secure Private Access

Thin Edge

Identity

Application Gateway

Enterprise Asset Management

Endpoint Agent

Agentless Security Posture

Identity

Wireless

Switching

Identity

Privilege Acccess Management

Next Generation Firewall

Orchestration & management

Expert Services

All

All

Account Management

SAAS Management

SAAS Application Security

Managed Services

Platform as a service (PAAS)

Other SAAS Services

4D Pillars

Cloud

Popular Solutions

online help

Supported vendors & configuration objects

Supported vendors & configuration objects

Exception

Supported vendors & configuration objects

Supported vendors & configuration objects

Exception