Saving the PAN source configuration files

Before starting the conversion wizard:Palo Alto, save a copy of your configuration file to the computer where FortiConverter is installed.

Configuration File from Palo Alto FW (Not Managed by Panorama)

1. Log-in to Palo Alto FW web UI using super-user account.
2. In the web UI, go to Device > Setup > Operations, then click Export named configuration snapshot.



3. Select the running-config.xml from the dropdown menu.



4. Download the file above and upload to FortiConverter through the source configuration tab and follow the steps in conversion process.

Configuration File from Palo Alto FW Web UI (Managed by Panorama)

1. Log in to the Palo Alto FW web UI using super-user account.
2. In the web UI, go to Device > Support > Tech Support File, then click Generate Tech support File.



3. Once the file is generated and become available, click Download Tech Support File.



4. Unzip and Untar the file and then navigate to the path \opt\pancfg\mgmt\saved-configs\ to fetch a file named "merged-running-config.xml".



5. Use the file above to upload to FortiConverter through the source configuration tab and follow the steps in conversion process.

Configuration File from Palo Alto FW CLI (Managed by Panorama)

1. Log-in to the Palo Alto FW CLI using super-user account.
2. Use these commands to generate or export "tech-support-file" to TFTP server or SCP server:

> tftp export tech-support to <tftp host>

> scp export tech-support to <username@host:path>

3. Unzip and Untar the file and then navigate to path \opt\pancfg\mgmt\saved-configs\ to fetch a file named ".merged-running-config".
4. Use the file above to upload to FortiConverter through source configuration tab and follow the steps in conversion process.

Saving the Application Default Services Table

Saving a PAN application name mapping FortiGate service name file which includes the PAN application names and standard ports information. The mapping can be exported into a csv file from Palo Alto FW. Then upload the file to FortiConverter through application default services table tab on the start page.