Firewall & network migration

AI-assisted migration.
You control the changes.

Translate supported firewall and network configurations. Connect your AI assistant through MCP to explore jobs and findings, with evidence your engineers can review.

Request access Explore migration paths

Account approval required.

See the AI/MCP walkthrough →

Quick Convert entry screen with no configuration selected — **Quick Convert**
Choose the source and target, then review migration settings.

See the work

Prepare, then review.

Use the Terminal from your workspace and inspect what the verification evidence says needs attention.

NetConverter Local synthetic verification with differences open for review — **Verification · synthetic example**
Differences remain open for engineering review; this is not migration approval.

NetConverter Terminal version 0.4.3 start screen — **Terminal v0.4.3 · start screen**
Submit files explicitly from your workspace and review results.

AI Integrations walkthrough

Work from your assistant.
Review the evidence.

A guided illustration of how an engineer can explore a saved migration job. This walkthrough does not connect to a live job or submit files.

Connect

Use the tools you already know.

Hosted MCP gives enabled accounts access to available jobs, findings and knowledge, including addresses from your own jobs by default. The Terminal bridge can submit a selected file directly to NetConverter.

Open the setup guide →

Editable migration decisions

You control the changes.

Review the generated YAML, choose supported mappings and keep a clear record of your decisions. Available controls depend on the migration path.

Map your target. Review zone and interface mappings.
Choose what changes. Review supported object and cleanup options.
Keep the record. Save your complete YAML and review the output before target testing.

migration-decisions.yaml

# Illustrative ASA → Palo Alto excerpt.
# Keep and validate the full generated document.
schema_version: "3.0.0"
options:
  ai_guidance: false
  remove_unused_objects: false
object_overrides:
  DEMO_WEB:
    action: rename
    target_name: APP_WEB
zone_mapping:
  Inside: trust
interface_mappings:
  - source: GigabitEthernet0/0
    target: ethernet1/1

Illustrative excerpt; supported fields depend on the selected path.

Explore migration paths across these platforms