Seamlessly migrate VM-Series firewalls to AI Runtime Firewall (AIRS VM) using a
single image, enabling licensing-driven mode transitions without reboots.
| Where Can I Use This? | What Do I Need? |
|---|
|
|
VM-Series Firewall licensed by Software NGFW
Credits PAN-OSĀ® 11.2.13 or later or 12.1.7 or later
(for single image) Panorama management server running at the same
or a higher PAN-OS version. Strata Cloud Manager (SCM)
|
You can migrate between VM-Series firewalls and AI Runtime Firewall (AIRS VM) by
modifying the associated deployment profile. This workflow is applicable for a
standalone management, Panorama, or Strata Cloud Manager (SCM).
Deploying a single image without an associated license, will bring up the
firewall in VM-Series mode, by default.
By migrating your existing VM-Series firewalls to AI Runtime Firewall (AIRS VM), you
can avail the benefits of the following additional features:
Before starting the migration:Before initiating, ensure all firewalls intended for
migration are
upgraded to the single
image (PAN-OS 11.2.13 or later or 12.1.7 or
later) and your Panorama instance runs the same or a higher version
than the devices it manages.
Migrating VM-Series to AI Runtime Firewall (AIRS VM) would
consume more credits and the system checks for available credits and
re-calculates it. If the credits are insufficient, then the
migration is blocked.
If your deployment profile contains more than 200
firewalls, the migration cannot be performed from the CSP. Please
contact support to
carry out this migration.
End-to-end migration can take up to 30 mins.
