SonicWall configuration migration
ฝัง
- เผยแพร่เมื่อ 16 ก.ย. 2024
- Quick technical video on SonicWall configuration migration. We will briefly touch on SonicWall CLI and also use the SonicWall configuration migration tool.
SonicWall configuration migration matrix: www.sonicwall....
SonicWall configuration migration tool: migratetool.gl...
SonicWall basic configuration step by step (part 1): • SonicWall basic config...
Use the command "no cli pager session" before exporting the configuration to prevent the cli from showing page by page
Thsnks!
I have pinned your comment so it stays on top
I needed this about 3 weeks before you posted it. I moved from a NSA2600 to NSA2700 manually vs using the sonicwall migration tool so that I could do some cleanup and best practice changes.
• Redoing Configuration vs. Using Migration Tool: The video outlines two main methods for migrating configurations from an old SonicWall firewall, like a TZ300, to a new Gen 7 firewall, such as a TZ-670: redoing the configuration from scratch or using the configuration migration tool. Redoing the configuration is recommended for ensuring a clean, up-to-date setup, especially if the current configuration is outdated, messy, or not well-understood by the current administrator.
• Benefits of Redoing Configuration: Redoing the configuration allows administrators to review and understand every policy and setting, ensuring that only necessary and correct configurations are applied. This approach is particularly advised if the current configuration has accumulated unnecessary or test policies over the years or if there's a lack of clarity about what's included in the configuration.
• Configuration Migration Tool: For configurations that are recent, clean, and well-maintained, the configuration migration tool is a fast and efficient way to transfer settings to the new device. This tool saves time but should only be used if the administrator is confident in the quality of the existing configuration.
• Practical Tips for Migration: The video provides practical tips for both methods, including how to use the command line interface to extract and transfer custom address objects to the new firewall, and how to use the configuration migration tool effectively, including interface remapping and ensuring the new firewall is running the latest firmware before importing the configuration.
• Importance of Clean Configuration: Emphasized throughout the video is the importance of starting with a clean, well-understood configuration to make the most of the new firewall's capabilities and ensure security and efficiency. Whether redoing the configuration from scratch or using the migration tool, the goal is to have a configuration that is tailored to the current needs and security standards of the organization.
Hello Mr. Talbot. Thank you for this video. It helped me prepare for a migration I am doing. A quick question. When I get to the section of the migration tool where is asks to check or uncheck the HA box, do I leave this checked for my primary unit? Or should I uncheck it? By the sound of it, it seems I would leave it checked when I am migrating the config from my HA unit, but I am a little confused. Any help would be greatly appreciated.
Very good video, and perfectly explained. But sonicwall could create the same thing to export services, nats, acls, etc... The same mistakes can be made creating services than objects...
Yes you can use CLI for other stuff. Doing it for address object was just an example
Jean-Pier, its been great watching your videos. they have helped me a lot. I just wanted to ask, is SSH commands the same and compatible between all OS versions?
Good one. I would assume they are pretty much the same. Of course added features and functionality will make CLI Commands different between versions.
@@JeanPierTalbot totally. Just trying to figure out a quicker way to lock wan access to specific IPs so objects, groups and the settings of wan to wan to be affected all within cli commands. I’ve got some 200s out there. Mainly 400 and some 470 to do this onto.
hello Jean,
Please can you add more videos of Sonicwall for how to create rules, object-group through CLI . I am interested in CLI Command
Hei,
|
If I want to migrate from NSA 2700 to nsa 4700 , it s partially imported.
Jean-Pier, how do you setup multiple public ips such as x.x.x.218-222 all same isp but all in use upgraded from old dell sw nsa to current tz370
I suspect you want to nat then inside. So same thing as my nat video. But instead of x1 IP, you would use one of the other ip you have. And you may want to use the reflective policy in mentioning depending on what you have as server behind
Hello Jean-Pier,
When i browse old configuration.exp backup file in to the migration tool it's showing error..
Hello,
Give a call to support, they will be able to help you
Is the Migration Tool site holding imported configs? I dont like the fact of importing to a web portal.
Not that I’m aware of. I couldn’t find any document about it.
FYI, admin password of your firewall is not in the config.
make a video on how to troubleshoot sonic firewalls with cahtgpt if we face any strange behavior our network how do we solve it within no time please make a detailed video
Troubleshooting with chatGPT? I would advice calling sonicwall tech support instead of using chatGPT. As much as I think AI is cool, I don’t think it can get anywhere near the level of sonicwall tech support. One day maybe, but definitely not now :-)
Hello! your videos are awesome! I have a situation with a client, it's a long story - would you mind reaching out to me? Something that is taking me 2 days will probably take you a half hour! I would definitely compensate you for your time if you are interested in helping. Thank you!
I see you contacted support. They are great to help out and guide you to fix the issue. I see in the ticket that firewall does not receive any traffic from the outside. sounds like a WAN setting issue (Static IP that needs to be set maybe?). Also, I can put you in touch with a local reseller in your area if you prefer to get someone sorting this out for you.