Currently, many projects are being launched, the purpose of which is to replace existing information security tools. And this is not surprising - attacks are becoming more sophisticated, many protection tools can no longer provide the proper level of security. In the course of such projects, various difficulties are encountered - the search for suitable solutions, attempts to “squeeze” into the budget, deliveries, directly migration to a new solution. As part of this article, I want to tell you what Fortinet offers so that the transition to a new solution does not turn into a headache. Of course, we will talk about the transition to the product of the company itself. - new generation firewall .
In fact, there are several such offers, but they can all be combined under one name - FortiConverter.
The first option is Fortinet Professional Services. It is a customized consulting service for migration. Its use allows not only simplifying your task, but also avoiding the pitfalls that may arise during the migration process. An example list of services offered is as follows:
- Development of solution architecture using best practices, writing various manuals describing this architecture;
- Development of migration plans;
- Analysis of migration risks;
- Commissioning of devices;
- Transferring a configuration from an old solution;
- Direct support and troubleshooting;
- Development, evaluation and execution of test plans;
- Incident management after switching.
To use this option, you can write .
The second option is the FortiConverter Migration Tool software. It can be used to convert a third-party hardware configuration to a configuration suitable for use on FortiGate. The list of third-party manufacturers supported by this software is shown in the figure below:
Actually this is not a complete list. For a complete list, see the FortiConverter User Guide.
The standard set of parameters to be converted is as follows: interface settings, NAT settings, firewall policies, static routes. But this set can vary greatly depending on the hardware and its operating system. Detailed information about the parameters to be converted from a specific device can also be found in the FortiConverter User Guide. It is worth noting that migration from older versions of FortiGate OS is also possible. In this case, all parameters are converted.
This software is purchased under an annual subscription model. The number of migrations is not limited. This can help a lot if you are planning multiple migrations during the year. For example, when replacing equipment both at the main sites and in branches. An example of the program can be seen below:
And the third, final option is FortiConverter Service. It is a one-time migration service. Migration is subject to the same parameters that can be converted through the FortiConverter Migration Tool. The list of supported third parties is similar to the one above. Migration from older FortiGate OS versions is also supported.
This service is available only when upgrading to FortiGate E and F series models and FortiGate VM. Supported models are listed below:
This option is good because the converted configuration is loaded into an isolated test environment with the target FortiGate operating system to check the correctness of the configuration execution and its debugging. This allows you to significantly reduce the amount of resources required for testing, as well as avoid many unforeseen situations.
To use this service, you can also write .
Each of the options discussed can greatly simplify the migration process. Therefore, if you are afraid of difficulties when switching to another solution, or have already encountered them, do not forget that help can always be found. The main thing to know search;)
Source: habr.com