Best Practices for Migrating to Application-Based Policy

Use Expedition and Policy Optimizer to migrate legacy firewall security policy to a Palo Alto Networks next-generation firewall or Panorama.
You don’t have to sacrifice better security in exchange for application availability. You can use Expedition and Policy Optimizer to automate and reduce the time and effort of migrating from a legacy firewall’s port-based Security policy to an application-based Security policy on a Palo Alto Networks next-generation firewall or Panorama in a phased, safe manner.

Related Documentation