Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

PDF

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Management center requirements

Updated: August 18, 2026

Want to summarize with AI?

Lists the prerequisites for both on-premises and cloud-delivered Firewall Management Center.

The Migration Manager supports both on-premises and cloud-delivered Firewall Management Center.

On-premises management center prerequisites

Smart licensing: Installed for all features being migrated.
REST API: Must be enabled (System > Configuration > Rest API Preferences).

Note

You need to have an administrator user role in Firewall Management Center to enable REST API. For more information on management center user roles, see User Roles.

Cloud-delivered management center prerequisites

Managed via Security Cloud Control (formerly Cisco Defense Orchestrator).
API token must be generated via the Security Cloud Control portal.
Ensure connectivity to the appropriate regional URL:


Region	URL extension
Europe	https://eu.manage.security.cisco.com/
US	https://us.manage.security.cisco.com/
APJC	https://apj.manage.security.cisco.com/
Australia	https://au.manage.security.cisco.com/
India	https://in.manage.security.cisco.com/

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.