Firewall Migration Tool

The migration to a Palo Alto Networks® next-generation firewall is a critical step toward the prevention and detection of cyberattacks. Today’s advanced threats require moving away from port-based firewall policies — which are no longer adequate to protect against a modern threat landscape — into an architecture that reduces your attack surface by safely enabling only business-critical applications and eliminating applications that introduce risk.

Migrating from a third-party firewall to a Palo Alto Networks next-generation firewall can be accelerated by leveraging the Palo Alto Networks Migration Tool. This software tool will transfer the various firewall rules, addresses and service objects to a PAN-OS® XML config file that can be imported into a Palo Alto Networks next-generation firewall.

We offer a disruptive next-generation security platform built from the ground up to specifically address the rapidly evolving threat landscape. This unique platform combines the power of a next-generation firewall with advanced subscriptions for threat prevention, URL filtering, GlobalProtect™ and WildFire™. Having an integrated solution not only helps to address every step of the kill chain, but also increases prevention rates.


Fundamental shifts in application usage, user behavior and network infrastructure have resulted in an evolved threat landscape that has exposed weaknesses in traditional port-based firewall protection. We have developed an innovative approach to securing networks that identifies all traffic based on applications using an application-traffic signature called App-ID™. This replaces conventional approaches that control traffic based on port.


The Palo Alto Networks Migration Tool enables you to analyze your existing environment, convert existing security policies to Palo Alto Networks next-generation firewalls, and assist with the transition from proof-of-concept to production.

With a combination of tools, expertise and best practices, we will help analyze your existing environment, migrate policies and firewall settings to the next-generation firewall, and assist in all phases of the transition.


Firewall-policy migration can be a challenging task, and is most effectively accomplished with professional services assistance from Palo Alto Networks and a network of solution partners, who can guide you though the migration process using a combination of automated tools and best practices.

Palo Alto Networks Consulting Services are available to ensure a smooth transition and enable you to get the maximum value out of your next-generation firewall from Palo Alto Networks. Take advantage of the Palo Alto Networks Firewall Migration Services to get your next-generation firewall project off to a great start.

Find Certified Partners


A community for users to download the Migration Tool and get support by collaborating with each other.

Visit the Community