MIGRATION FROM FORTINET TO SANGFOR NSF

Marvin Comamao Lv1Posted Jun-18-2025 09:44

Hi Guys,

Good Day!

I need assistance with the migration from Fortinet to Sangfor. Do you have any guidelines for this?"





By solving this question, you may help 961 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Zonger Lv5Posted Jun-24-2025 04:16
  
Migrating from Fortinet to Sangfor requires a structured approach starting with a full network audit including backups and cleanup of old or permissive rules. It's best to manually rebuild configurations such as firewall rules, NATs and object groups using tools like spreadsheets or scripting for accuracy rather than relying on automated converters. Set up a lab or parallel environment to test Sangfor with mirrored IPs and settings before cutover. Execute the migration in phases during a maintenance window validating each step while keeping the Fortinet system as a fallback. verify service functionality with stakeholders after post migration, enable advanced features gradually and monitor performance to ensure a smooth transition.
Mdshahid Lv1Posted Jun-23-2025 16:36
  
Hope this helps

This topic contains more resources

You must log in to download or view the file. Not registered yet? Register

x
nushat Lv1Posted Jun-20-2025 01:35
  
Export all of the current settings for comparison using the Fortinet settings Backup feature.  Configuration analysis: NAT, VPN, routing, objects, record policies, etc.  Configuration mapping to Sangfor: based on similar functionalities (e.g., Address Object → Address Group, Security Policy → Access Rule).  Use a lab setting or try a partial configuration to test the Sangfor setup.  Verify VPN, NAT, and order rules again because Sangfor and Fortinet may handle them differently.
mantasha Lv2Posted Jun-20-2025 01:28
  
The Fortinet settings backup tool allows you to export all of the current settings for comparison.  NAT, VPN, routing, objects, record policies, and other configurations are analyzed.  Sangfor configuration mapping is based on comparable functionalities (e.g., Security Policy → Access Rule, Address Object → Address Group).  To test the Sangfor setup, use a lab environment or attempt a partial configuration.  Because Sangfor and Fortinet may handle VPN, NAT, and order rules differently, double-check them.
CLELUQMAN Lv4Posted Jun-18-2025 22:20
  
You can try the Sangfor Network Secure Configuration Converter for FortiGate (Beta).
I tested it, really speeds things up. Much more efficient than configuring everything manually.

check here
https://community.sangfor.com/fo ... p;extra=#/pid188274
AR Lv2Posted Jun-18-2025 17:13
  
Hello
Export all of the current settings for comparison using the Fortinet settings Backup feature.


Configuration analysis: NAT, VPN, routing, objects, record policies, etc.

Configuration mapping to Sangfor: based on similar functionalities (e.g., Address Object → Address Group, Security Policy → Access Rule).

Use a lab setting or try a partial configuration to test the Sangfor setup.

Verify VPN, NAT, and order rules again because Sangfor and Fortinet may handle them differently.
Newbie968130 Lv1Posted Jun-18-2025 10:28
  
Fortinet Configuration Backup: Export all current configuration for comparison.

Configuration Analysis: Record policies, NAT, VPN, routing, objects…

Mapping configuration to Sangfor: Based on equivalent functions (eg: Security Policy → Access Rule, Address Object → Address Group).

Test configuration on Sangfor: Use lab environment or test partial configuration.

Double check VPN, NAT, and order rules, because Sangfor may handle differently from Fortinet.

I Can Help:

Change

Moderator on This Board

1
148
3

Started Topics

Followers

Follow

917
183
94

Started Topics

Followers

Follow

Board Leaders