Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

PDF

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Features in Firewall Migration Manager

Updated: September 1, 2026

Want to summarize with AI?

Learn about the new features introduced in Firewall Migration Manager, including automated workflows, centralized dashboard monitoring, and intelligent configuration parsing. These features streamline the migration of legacy firewall configurations to Secure Firewall Threat Defense, improving visibility and efficiency throughout your transition process.

This table summarizes the new features in Firewall Migration Manager.


Release	Features	Details
10.0.1	Support for Palo Alto Networks Firewall to Firewall Threat Defense migration.	Firewall Migration Manager supports migration of the Palo Alto Networks Firewall configurations to a Firewall Threat Defense device.
	Enhanced pre-migration and post-migration reports.	Firewall Migration Manager offers enhanced pre-migration and post-migration reports for improved user experience and easier analysis of migrated configurations.
	Support for migration from layer 2 to layer 3 interfaces.	Firewall Migration Manager supports migration from layer 2 to layer 3 interfaces by converting compatible interface configurations to routed interfaces on the Firewall Threat Defense device.
	Support for VRF migration	Firewall Migration Manager offers migration support for VRFs.
	Support for BGP migration	Firewall Migration Manager offers migration support for BGP.
	Mapping of NAT zones based on the routing table	Firewall Migration Manager uses the routing table to derive NAT zone mappings during migration.
	Handling multiple IP addresses across interfaces	During migration, if a Palo Alto Networks Firewall interface has multiple IP addresses, the Firewall Migration Manager wizard prompts you to choose one IP address for the interface.
	Migration of policy hierarchy from Panorama	Firewall Migration Manager migrates the Palo Alto Networks Firewall policy hierarchy as nested access control policies in a Firewall Threat Defense device.
	Migration of external dynamic lists	Firewall Migration Manager supports migration of external dynamic lists.
	Support for bulk addition of applications in access policy rules.	Firewall Migration Manager supports bulk addition of applications in access policy rules during migration. This reduces the manual effort required to update application-based access policies after migration.
10.0.0	Support for ASA to Firewall Threat Defense migration.	Firewall Migration Manager supports the migration of ASA configurations to a Firewall Threat Defense device.
	Auto-detection of target versions	Automatically identifies target device version and information for Firewall Management Center and Firewall Threat Defense to ensure accurate configuration alignment.
	Automated migration workflow	The Firewall Migration Manager reduces manual effort with automated transition of security policies, network objects, and device configurations from your existing environment to a Firewall Threat Defense device.
	Centralized dashboard support	The Firewall Migration Manager dashboard provides a unified, intuitive interface to streamline your migration journey. Designed to improve visibility and operational efficiency, the dashboard offers these capabilities: Migration overview: Monitor the status of all your migration projects in real-time and include counts for completed, in-progress, and error-state migrations. Proactive alerting: Stay informed with immediate visibility into recent migration alerts and project details. Quick links: Access critical resources directly from the dashboard, including pre-migration checklists, comprehensive video guides, and one-click support ticket creation. This centralized approach simplifies the transition from third-party or legacy firewalls to next-generation Cisco firewall platforms, ensuring a more organized streamlined migration process.
	Improved GUI	The Firewall Migration Manager offers an improved graphical user interface that unifies migration tasks in a wizard-driven orchestration platform. It prioritizes visual clarity, parallel task processing, and proactive status monitoring.
	Intelligent parsing	This feature automatically scans your configurations to identify items that are either unsupported or unreferenced. This helps you save time by focusing your manual cleanup efforts only on the items that require attention. This tool parses enterprise-scale configurations efficiently, handling thousands of rules in minutes.
	Migration history retention	Keeps migration history across different projects so you can track and revisit previous migrations.
	Parallel migration support	To improve efficiency, this feature allows you to run up to 10 migration processes simultaneously, enabling bulk handling of your network transitions.
	Pause and resume	The Firewall Migration Manager allows tasks to be paused and resumed at any point without data loss. In-Progress can be accessed from the Recent Alerts tile on the home page or by clicking Migration under the main menu.

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.