Home
Support
Product Support
Security
Firewall Migration Manager
Install and Upgrade Guides

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Expand all sections

About this content

About Firewall Migration Manager

Firewall Migration Manager overview
Features in Firewall Migration Manager
Default home page
How PAN to threat defense migration works

Migration Requirements

Licensing requirements
Platform requirements
Device readiness and requirements
Supported platforms and versions
Management center requirements
Supported configurations

Pre-Migration Tasks

Download the Firewall Migration Manager
Export the configuration from PAN

Palo Alto Network Firewall to Threat Defense Migration Workflow

Run the migration
Upload the PAN configuration file
Specify destination parameters
Map PAN configurations with Firewall Threat Defense interfaces
Review and validate the migration configuration
Review the pre-migration report
Review the post-migration report

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Pre-Migration Tasks

Updated: August 18, 2026

Guides users through essential preparatory steps including downloading Firewall Migration Manager application, gathering configuration files, and collecting certificates and packages needed before beginning the firewall migration process.

Download the Firewall Migration Manager

Learn how to download the Firewall Migration Manager for installation on your local Windows or macOS system. This topic also explains how to access the cloud-hosted version of the application through your Security Cloud Control tenant to begin migrating your firewall configurations.

Export the configuration from PAN

Lists the available methods for exporting configuration files from Palo Alto Networks firewalls, along with recommended best practices.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.