Home
Support
Product Support
Security
Firewall Migration Manager
Install and Upgrade Guides

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Expand all sections

About this content

About Firewall Migration Manager

Overview of Firewall Migration Manager
Features in Firewall Migration Manager
Default home page of Firewall Migration Manager
How Palo Alto Networks Firewall to Firewall Threat Defense migration works

Migration Requirements

License requirements
Platform requirements
Device readiness and requirements
Supported platforms and versions
Firewall Management Center requirements
Supported configurations

Pre-Migration Tasks

Download the Firewall Migration Manager
Export the configuration from Palo Alto Networks Firewall

Palo Alto Networks Firewall to Firewall Threat Defense Workflow

Run the Firewall Migration Manager migration
Upload the Palo Alto Networks Firewall configuration file
Specify destination parameters
Map Palo Alto Networks Firewall configurations with Firewall Threat Defense interfaces
Review and validate the migration configuration
Review the Firewall Migration Manager pre-migration report
Review the Firewall Migration Manager post-migration report

Migrating Palo Alto Networks Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Pre-Migration Tasks

Updated: September 1, 2026

Guides users through essential preparatory steps including downloading Firewall Migration Manager application, gathering configuration files, and collecting certificates and packages needed before beginning the firewall migration process.

Download the Firewall Migration Manager

Learn how to download the Firewall Migration Manager on your local Windows or macOS system.

Export the configuration from Palo Alto Networks Firewall

Lists the available methods for exporting configuration files from Palo Alto Networks Firewall, along with recommended best practices.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.