Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

PDF

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Firewall Management Center requirements

Updated: October 15, 2026

Want to summarize with AI?

Log in

Lists the prerequisites for using on-premises Firewall Management Center for Firewall Migration Manager.

The Firewall Migration Manager supports only the on-premises Firewall Management Center.

  • Smart Licensing: License requirements

  • REST API:

    You must enable REST API (System (system gear icon) > Configuration > REST API Preferences).

    Note

    You must have an administrator user role in Firewall Management Center to enable REST API.

  • Enable CSDAC connector in Firewall Management Center:

    Before you start the migration, enable the CSDAC connector in Firewall Management Center.

    If you do not enable the Dynamic Attribute connector manually, Firewall Migration Manager can enable it automatically. Wait about 10 minutes before you start the migration. If you start the migration before the connector is ready, access rules that use IP-type External Dynamic List (EDL) fail to migrate.

    For an air-gapped deployment, contact Cisco TAC to get the tar package required to enable the CSDAC connector in Firewall Management Center.