If there are many devices to be converted where all of them are the same model, sharing the same interface mapping relationship in conversion, then bulk conversion can convert all of them at once. Collect all the configuration files to be converted, compress them into a ZIP file and use the ZIP file as the input.

FortiOS doesn’t have a corresponding feature to the virtual router in Juniper SRX, but it is an approach to convert a virtual router into an independent VDOM in FortiOS. When this option is enabled, each virtual router would be converted into a VDOM.

Enable consolidated mode in FortiOS and convert security rules into consolidated policies which are able to reference both IPv4 and IPv6 addresses in a single policy.

Juniper SRX may have multiple address objects with the same name but tied to different zones. When this option is enabled, duplicate address name will be converted to origname_zonename. When disabled, they will be converted to origname_1, origname_2 … etc.

(Only available for FortiOS 6.2 conversions) Enable consolidated mode in FortiOS and convert security rules into consolidated policies which are able to reference both IPv4 and IPv6 addresses in a single policy.

When this option is enabled, a policy using VIPs as destinations would use the source filter of the VIPs as source addresses.

When this option is enabled, the source and destination interfaces of all the policies would be set to "any".

When selected, all vip extintf value will be set to “any”. Only available when central NAT mode is enabled.

Select the model of the target device, or select a device connected to FortiConverter.

Specifies whether FortiConverter copies the annotated lines in rules from the source configuration to converted FortiGate policies.

Specifies whether FortiConverter ignores firewall policies with an "all" or "any" address when it merges a NAT rule and a firewall policy to create a FortiGate NAT policy.

FortiConverter creates new policies in the output configuration based on where NAT rules to firewall policies intersect. Because firewall policies that use "all" or "any" as the address create many intersections, Fortinet recommends that you ignore them.

When this option is enabled (in policy NAT mode only), a static NAT rule would be converted into a central SNAT rule and an unidirectional VIP object. Otherwise it would be converted into a bidirectional VIP object

Specifies which types of NAT FortiConverter merges with the output firewall policies, or whether FortiConverter performs NAT merge based on object names or values.

• Off – FortiConverter converts firewall policies only and doesn't perform NAT merge for this type of NAT. This is useful for performing a quick, initial conversion to discover any conversion issues.
• Object Names – FortiConverter performs NAT merge based on matching address names in firewall policies and NAT rules.
• Object Values – FortiConverter performs NAT merge based on matching address values in firewall policies and NAT rules. It generates the most accurate matching of NAT rules and policies, but in most cases, it also generates more NAT policies.

Because it can take FortiConverter several hours to complete a conversion that include a large number of NAT rules, Fortinet recommends that you turn off or limit NAT merge for your initial conversion. Then, resolve any issues with the conversion before you run it again with NAT merge enabled. For more information, including example matches, see NAT merge options.