Migrate from NSA2600 to TZ370 not supported by Migration Tool -- options?

hertz_admin

What are my options if the Migration Tool does not support migrating from NSA2600 to TZ370?

Thanks in advance.

MustafaA

@hertz_admin , your only option is to manually configure your TZ370. If you have too many Address Objects or Service Objects you can use SonicOS API to migrate them. Here is KB as an example to migrate FQDN Address Objects.

https://www.sonicwall.com/support/knowledge-base/how-to-migrate-fqdn-address-objects-from-a-gen-6-to-gen-7-device-using-sonicos-api/200812073105770/

MustafaA

@hertz_admin , CLI will also work.

TKWITS

Do it by hand.

hertz_admin

@MustafaA Thanks, I'll check it out.

Does this mean the CLI export method won't work? https://www.sonicwall.com/support/knowledge-base/export-configuration-settings-using-enterprise-command-line-interface-e-cli/170504991622695/

heritage

I think SonicWall are actively trying to stop customers from moving to a new Gen 7 firewall. If you have to manually configure a complicated firewall from scratch, customers will look at alternative vendors. For example, the Secure Upgrade datasheet says you can move from a NSA 2600 to a TZ670 but the migration tool doesn't allow for this. Misleading advertising in my view and will certainly mean some customers will move away from SonicWall because we've lost the 'sticky' nature of moving config settings.

Larry

@heritage - but if you move to another vendor, guess what? You are going to have to manually program that new device - from scratch - often in a way that is not as intuitive as the one that SonicWall provides.

And for you to point out the Secure Upgrade data sheet as misleading is quite the stretch. That device replacement program says if you have that old device, you can get this new device. The last page even offers services (at additional cost) to help you make the move. You could have taken advantage of that approach. It would work and you wouldn't have any issues at all with the migration tool...