>
    Strata Copilot
    Migration of Standalone Firewalls
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma AIRS
    3. Activation & Onboarding
    4. Migrate VM-Series to AI Runtime Firewall (AIRS VM)
    5. Migrating VM-Series to AI Runtime Firewall (AIRS VM)
    6. Migration of Standalone Firewalls
    Download PDF
    Prisma AIRS

    Migration of Standalone Firewalls

    Table of Contents

    Migration of Standalone Firewalls

    To migrate standalone firewall to AI Runtime Firewall (AIRS VM):
    1. Log in to the Customer Support Portal.
    2. Navigate to SWFW Credits and identify the deployment profile you want to migrate.
    3. Click Options > Edit Profile.
    4. Toggle the Firewall Type option from VM-Series to Prisma AIRS.
    5. (Optional) Add or remove subscriptions as needed.
    6. Click Update Deployment Profile to save changes.
    7. Click View Devices.
      After the migration is completed, you will observe the following on the Software NGFW Devices page:
      • The authcode of the firewall remains the same.
      • The Deployment Profile Product Type changes to VM or VM-AI based on migration.
      • Software NGFW device changes to AI-powered under the serial number.
    8. Refetch the license on the device.
    9. The model is updated, after the license is applied.

    High Availability (HA) Support

    HA pairs can be migrated through Strata Cloud Manager or Panorama by following the steps 1-7 in Migration of Standalone Firewalls section.
    For standalone pairs, an interim model mismatch will occur during migration, which temporarily prevents the synchronization of running configurations. To manage this, it is recommended that you refresh the license on the passive device first, followed by the active device.

    Migrating AI Runtime Firewall (AIRS VM) to VM-Series

    To migrate from the AI Runtime Firewall (AIRS VM) back to the VM-Series follow the steps 1-7 in Migration of Standalone Firewalls section. Ensure that in step 4, you switch the Firewall Type selection from Prisma AIRS to VM-Series.
    Migrating AI Runtime Firewall (AIRS VM) to VM-Series would consume lesser credits and the system checks for available credits and re-calculates it.

    © 2026 Palo Alto Networks, Inc. All rights reserved.