How to migrate FortiADC, Fortimanager and Fortoanalyzer from VMware Esx to Nutanix Prism Central

[volkerdose]

Dear forum-members,

our virtual infra-structure was renewed from VMWare to Nutanix Prism. We are actually moving the machine from the old to the new environment.

To migrate the Linux server my colleagues  use a migration assistant, this assistant logs on to the Linux Server with root credentials,  uninstalls the vmware-tools, adds some drivers and installs prism-tools. After that the machine is copied and can be started. This is running fine so far. 

In the near future we need to migrate our Forti-Peoducts: one FortiADC-cluster (2 nodes AP), one FortiManager and one FortiAnalyzer. 

I understand that is not possible to get root access to these machines for the migration assistant.

Are there migration parts for the products ? Or do I need to install new machines on the Nutanix and backup and restore the data? 

For vmware I installed OVAs - is there a Nutanix Prism equivalent to download for this environment?

Best regards,

Volker

[AEK]

Hi Volker

As per my understanding of virtual things, this may not be possible.

You only solution might be to follow these steps:

• Install new FortiVMs (FAD, FMG and FAZ) on Nutanix using the Forti-Nutanix images (download on Fortinet support portal)
• Backup the configs from the existing FortiVMs
• Restore the configs on the new VMs
• On support portal, open CS ticket to move the licenses from the existing VMs to the new VMs

Hope it helps.

[farhanahmed]

Hi @volkerdose 

AFAIK Nunatix uses KVM images. You can download the KVM images from Fortinet Support portal.

For FortiAnalyzer and FortiManager you can follow the doc below to deploy:

https://docs.fortinet.com/document/fortimanager-private-cloud/7.6.0/nutanix-administration-guide/118...
https://docs.fortinet.com/document/fortianalyzer-private-cloud/7.6.0/nutanix-administration-guide/11...

Steps to migrate:
1. Take backup of current FAZ and FMG.

2. For FAZ backup the logs as well using SFTP/FTP or SCP.

3. Deploy new VMs on new Server.

4. Go to Support portal, set IP address of the new FAZ and FMG then download the license files.

5. Upload license to new VMs.

6. Store backup config.

7. For FAZ restore logs and rebuild the SQL DB.

Reference docs:

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Backup-and-restore-of-FortiAnalyzer-se...

https://community.fortinet.com/t5/FortiManager/Technical-Tip-How-to-change-the-IP-Address-of-the-For...

https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-Using-exec-migrate-to-migrate-to-a-new...

[farhanahmed]

I assume similar process for FortiADC, someone familiar with process might reply here BUT better to open support ticket and get confirmation.