Skip to main content
mumbles202
New Member
June 27, 2022
Question

Migrate to Bigger Firewall

  • June 27, 2022
  • 2 replies
  • 1518 views

If we currently have a 100D and want to migrate to 400F, what's the best way to do so without using FortiConverter? I'd like to maintain all of our custom profiles, policy routes and overrides without having to do it all from scratch if possible. I imagine it's all in the CLI full-configuration but wanted to k own the best way to massage the old configuration to align with the new device.

2 replies

R_F
Explorer
June 28, 2022

im speaking based on my experiences. :)

heres my take,  firmware should identitical for both FGs. secure FG 100D backup, open it in notepad and perform copy and paste the portion you need to replicate to FG 400. much better if you have console cable directly connected to the device. It would be more useful as well during migration you have dual monitor to have better visibility in comparing config to both FGs.

manual config also help in cleaning some unused objects or addresses inside FG.

 

 

 

kcheng
Staff & Editor
Staff & Editor
June 28, 2022

Hi @mumbles202 

 

If you only wanted to copy the custom profiles, that would be pretty straightforward as you can probably copy and paste the respective. However, for policy routes, overrides, and firewall policy, you will need to map it to the correct interface or you will face error in pasting the config As different FortiGate model might have different naming for the ports, you may want to make sure that those ports are mapped manually in your configuration before you paste that in via CLI.

 

Just like what R_F mentioned, ensuring that both FortiGate firmware is identical is also important.

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!