Saving the PAN source configuration files

Before starting the conversion wizard:Palo Alto, save a copy of your configuration file to the computer where FortiConverter is installed.

Configuration File from Palo Alto FW (Not Managed by Panorama)

1. Log-in to Palo Alto FW web UI using super-user account.
2. In the web UI, go to Device > Setup > Operations, then click Export named configuration snapshot.



3. Select the running-config.xml from the dropdown menu.



4. Download the file above and upload to FortiConverter through the source configuration tab and follow the steps in conversion process.

Configuration File from Palo Alto FW Web UI (Managed by Panorama)

1. Log in to the Palo Alto FW web UI using super-user account.
2. In the web UI, go to Device > Support > Tech Support File, then click Generate Tech support File.



3. Once the file is generated and become available, click Download Tech Support File.



4. Unzip and Untar the file and then navigate to the path \opt\pancfg\mgmt\saved-configs\ to fetch a file named "merged-running-config.xml".



5. Use the file above to upload to FortiConverter through the source configuration tab and follow the steps in conversion process.

Configuration File from Palo Alto FW CLI (Managed by Panorama)

1. Log-in to the Palo Alto FW CLI using super-user account.
2. Use these commands to generate or export "tech-support-file" to TFTP server or SCP server:

> tftp export tech-support to <tftp host>

> scp export tech-support to <username@host:path>

3. Unzip and Untar the file and then navigate to path \opt\pancfg\mgmt\saved-configs\ to fetch a file named ".merged-running-config".
4. Use the file above to upload to FortiConverter through source configuration tab and follow the steps in conversion process.