How to use the NSM Firewall Migration App

NSM’s configuration migration feature streamlines firewall hardware upgrades by eliminating the need to manually recreate policies. Security rules, interfaces, VPNs, and other firewall configurations can be migrated in just a few clicks. This article explains how to migrate firewall configurations from supported legacy SonicWall firewalls to latest hardware

• Log in to MySonicWall.com
  Tip: To enable cloud Management on your firewall, please click here
• Navigate to Service | Available Services, then click Capture Security Center to launch it.
  
• Select Network Security Manager (NSM) and ensure that the correct and appropriate tenant where the firewall is registered is selected from the drop-down list.
  Tip: You can also access NSM directly by logging in to cloud.sonicwall.com.
  
• Navigate to Firewalls | Config Migration.
  Note: Using this Migration app eliminates the need to manually remove VLANs, WLAN tunnels, or other tunnel interfaces before import.
  
  
• From the Source Device drop-down list, select the source firewall and verify that it is running a supported firmware version. Supported Firmware Version illustrates the supported SonicOS versions for the source firewall, on which the source device should be running.Example: NSa 4700 selected as the source device.
  Note: Currently, only like-to-like device migrations are supported. The target device is automatically selected by the tool (for example, TZ570 → TZ580 or NSa 4700 → NSa 4800).
  
  
  
• From the drop-down list, select the Target Device Firmware Version.
  
• Upload the source settings file by either: Clicking Browse your computer, or Selecting Browse NSM backup. Once the file is uploaded, click Next.
  
  
• Review the Migration Notice by clicking Click here, then click OK to proceed.
  Note: Migration Notice is presented to check for unsupported configurations that won’t be migrated. It is intended as guidance and does not prevent the migration from proceeding
  
  
  
• Under Interface Mapping, click Auto Map, scroll down, and click Next.
  
• A pop-up window will appear showing the file generation process.
  
• Once the process completes, a confirmation message will appear stating: The target file is generated successfully. Click Download and import the generated file on the target device.
  
  Tip: Ensure that the target GEN8 firewall is running the appropriate and supported firmware version. For example, settings intended for SonicOS 8.1.0 are not supported and will not work on SonicOS 8.0.4.