vahidta / firewall_migration_tool

Firewall Migration Tool provides conversion from one vendor to another.

Firewall Migration Tool

fwmig tool helps you to migrate from one existing firewall to another one with simple copy/past steps.

• It supports most well-known vendors.
• This Tool is based on Flask and JS to provide Web UI for conversion of firewall objects and policies.
• There is no online dependencies after you run the app.
• Dockerfile is available for container implementaions.
• Logging for troubleshoot is implemented.
• Tested on python 3.8 and 3.9, and 3.10

---

Run the code:

python3.10 -m venv venv
source venv/bin/activate
pip install -r requirements.txt
python app.py

Or use Docker:

docker build -t fwmig .
docker run -p 8080:5000 --name=fwmig -d -v $(pwd)/logs:/code/logs/ -ti fwmig:latest

---

Supported Matrix:

Source Vendor	Destination Vendor
	Juniper SRX	Fortigate	Cisco ASA	Checkpoint	Palo Alto
Juniper SRX	N/A	Yes	Yes	Yes	Yes
Fortigate	No	N/A	No	No	No
Cisco ASA	No	No	N/A	No	No
Checkpoint	Yes	Yes	Yes	N/A	Yes
Palo Alto	Yes	Yes	Yes	Yes	N/A

Documentation

Firewall Migration Tool (fwmig) documentation lives at fwmig.readthedocs.io

Feedback

Please share your experience with me about Firewall Migration Tool through @tavajjohi on twitter.

firewall_migration_tool's Issues

address translation migration?

will the system support the address translation config migration?

Juniper Netscreen

Hi,

Can support netscreen to Fortigate?

Failed to open app.py

Hi,

I try run app.py but failed. Below is the errors

Traceback (most recent call last):
File "C:\Github\firewall_migration_tool-main\app.py", line 3, in
from flask import Flask, flash, request, redirect, url_for, send_from_directory
File "C:\Users\user\AppData\Local\Programs\Python\Python39\lib\site-packages\flask_init_.py", line 21, in
from .app import Flask
File "C:\Users\user\AppData\Local\Programs\Python\Python39\lib\site-packages\flask\app.py", line 32, in
from werkzeug.wrappers import BaseResponse
ImportError: cannot import name 'BaseResponse' from 'werkzeug.wrappers' (C:\Users\user\AppData\Local\Programs\Python\Python39\lib\site-packages\werkzeug\wrappers_init_.py)

PermissionError: [Errno 13] Permission denied: 'configs/test1.txt'

Hi,

i keep getting this permissionError when i try converting from Paloalto to ASA code

PermissionError: [Errno 13] Permission denied: 'configs/test1.txt'

Palo Alto to Juniper Translation Results in Error

I tried converting PA config to Juniper SRX, but got an error. The log is below

app.log

2023-07-05 03:30:25 INFO     [app.py:73] Conversion started ...
2023-07-05 03:30:25 INFO     [parser.py:24] Policy conversion started ...
2023-07-05 03:30:25 INFO     [palo_config_coverter.py:187] Policy process started ...
2023-07-05 03:30:25 WARNING  [parser.py:52] Conversion Failed! Please re-check file content or Source vendor.
2023-07-05 03:30:25 ERROR    [parser.py:53] local variable 'policy_src_address' referenced before assignment
2023-07-05 03:30:25 INFO     [parser.py:54] ==================================================

Broken toolchain: cannot link a simple C program

Hi i got below errors

\numpy\distutils\command\build_src.py", line 378, in generate_sources
source = func(extension, build_dir)
File "numpy\core\setup.py", line 676, in get_mathlib_info
raise RuntimeError("Broken toolchain: cannot link a simple C program")
RuntimeError: Broken toolchain: cannot link a simple C program