Security Policy Migration
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Configure Branch HA in a Hybrid Topology with Gen-1 (3000) and Gen-2 (3200) Platforms
- Prisma SD-WAN Incidents and Alerts
Security Policy Migration
Learn how to migrate between Security Policies (Original)
and Stacked Security Policies.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Prisma SD-WAN supports stacked network
and security policies. If you are a new user starting with Release
6.0.1, you can configure only stacked network and security policies.
You will not be able to view or access Security Policies (Original).
If you have configured original or legacy policies, you have
to migrate these legacy
policies to stacked policies before you can upgrade your
device to Release 6.0.1.
See the relationship between Security Policies
(Original) and Stacked Security Policies based on the ION device
versions. If you are:
- Using ION device version 5.5 or lower and you have configured Security Policies (Original)You can configure stacked security policies, but unless you upgrade your device to version 5.6 or higher, you cannot use the stacked security policies. You can continue using the original security policies.
- Using ION device version 5.5 or lower and you have not configured Security Policies (Original)You can configure stacked security policies, but unless you upgrade your device to version 5.6, you cannot use stacked policies. You will not be able to view or access Security Policies (Original).
- Using ION device version 5.6 or higher, but lower than 6.0.1, and you have configured Security Policies (Original)
- You can continue working with Security Policies (Original).
- You will not be able to upgrade your device to Release 6.0.1, unless you migrate these legacy policies to stacked policies.
If you try to upgrade your device to a device version 6.0.1 or higher without converting your legacy policies to stacked policies, you will receive an error message. - Using ION device version 5.6 or higher and you have not configured Security Policies (Original)You will have to configure stacked security policies. You will not be able to view or access Security Policies (Original).