← Karia Networks Pilot · commercial September 2026

Migrate. Optimize.
Control your firewall estate.

Pablo migrates Cisco ASA, Check Point, FortiGate, and Juniper SRX configurations to Palo Alto Networks PAN-OS — then finds and fixes shadow rules, duplicate objects, and stale policy in what's already running. It's in active pilot development — not yet a commercial product, with general availability planned for September 2026.

Cisco ASA Check Point FortiGate Juniper SRX → Palo Alto PAN-OS
Access the pilot Talk to us

What it does

Pablo is a firewall migration and optimization platform for teams moving to PAN-OS / Panorama or already running it. Point it at an existing config — upload an export or pull live from Panorama — and it parses every object, rule, and NAT entry, generates a clean PAN-OS configuration, and gives you a merge-aware base config so multiple sources of truth converge into one. Once you're on PAN-OS, the same platform keeps finding what's wrong with the rulebase: shadowed rules, duplicate objects, unused policy, and overly-broad access nobody's reviewed in years.

Platform

Multi-Vendor Migration
Cisco ASA, Check Point, FortiGate, and Juniper SRX parsers generate a working Palo Alto PAN-OS config, ready for Panorama.
Base Config Merge
Combine multiple source configs into one target with dedupe-by-value merging.
Policy Optimizer
Shadow rule detection, duplicate objects, unused policy, and syslog-backed rule tightening.
Config Browser
Full device-group hierarchy, bulk rule and address-object edits, and filtered CSV/XML export.
Network Topology
Live force-directed map of firewalls, zones, and routed networks, with route lookups and packet tracing.
Syslog Monitoring
PAN-OS syslog ingestion feeds rule-usage data straight back into the optimizer.
EDL Hosting
Host external dynamic lists (IP, domain, URL) as feeds your firewalls pull straight from Pablo.
Panorama Push
Push generated or optimized config back to Panorama with a dry-run preview first.
REST API
Bearer-token API for projects, devices, and optimizer runs — automate the rest.

Pilot access

Pablo is in invite-only pilot. Enter your pilot license key to see the installers available for every form factor — Linux, Debian/Ubuntu, RHEL/CentOS, Windows, and Docker. To download, add the email on file and we'll send a secure link valid for 30 minutes; the same key activates Pablo once installed.

Releases are GPG-signed. Verify with our release signing key (RSA-4096, fingerprint 12B4 9ADA 9D8B 5E84 50A3 7619 F513 E144 C605 E5E2): check checksums-<version>.txt.asc with gpg --verify, or import the key and run rpm --checksig on RPM packages.

Join the pilot

Want a pilot key or have questions before commercial launch in September 2026 — tell us about your firewall estate and we'll get back to you.

[email protected] → karianetworks.com →