Questions regarding FortiConverter

[kollpp]

We just changed firewall providers to Fortigate, and coming from Dell SonicWALL. We were referenced to the FortiConverter for moving policies/rules/migration over to the Fortigate. I'm a bit hesistent about doing so, as I feel like things won't be converted over entirely. I was curious about others experiences.

I'm thinking about just running side-by-side and configuring as I go versus just copying/pasting contents between each platform.

[sunilk]

Hi,
We encountered some issues while converting the VIP. SonicWall allowed the same public IP address to be NATed to multiple destinations on the same port, which is incorrect. Below is a sample of the converted configuration that we had issue with. Rest the policies are converted correctly.

--------------------

edit "WebM"
set extip 12.13.14.12
set mappedip 10.129.3.3
set extintf "any"
set service "HTTPS"
next
edit "vip-Exch_Grp"
set extip 12.13.14.12
set mappedip 10.129.7.241
set extintf "any"
set service "Exchange group"
next

----------------------------------

edit "Exchange group"
set member "HTTPS" "SMTP [Send E-Mail]" "DNS [Name Service]" "DNS [Name Service] TCP" "DNS [Name Service] UDP"
next

[AEK]

My experience with FortiConverter tool is that it doesn't convert the whole config. So you will need to complete the coversion manually (needs some knowledge).

But it seems FortiConverter service (online) is more efficient that FortiConverter tool.

Check the "SonicWall" section in both below pages.

https://docs.fortinet.com/document/forticonverter/7.2.0/online-help/220359/supported-versions-and-co...

https://docs.fortinet.com/document/forticonverter-service/23.1.0/online-help/765339/3rd-party-securi...

Hope it helps.

[adambomb1219]

I wouldn't bother.  Perfect time to clean up old unused policies, routes, objects, etc.