What it does
Pablo is a firewall migration and optimization platform for teams moving to
PAN-OS / Panorama or already running it. Point it at an existing config —
upload an export or pull live from Panorama — and it parses every object,
rule, and NAT entry, generates a clean PAN-OS configuration, and gives you
a merge-aware base config so multiple sources of truth converge into one.
Once you're on PAN-OS, the same platform keeps finding what's wrong with
the rulebase: shadowed rules, duplicate objects, unused policy, and
overly-broad access nobody's reviewed in years.
Platform
Multi-Vendor Migration
ASA, Check Point, FortiGate, Juniper SRX, and Panorama parsers generate a working PAN-OS config.
Base Config Merge
Combine multiple source configs into one target with dedupe-by-value merging.
Policy Optimizer
Shadow rule detection, duplicate objects, unused policy, and syslog-backed rule tightening.
Config Browser
Full device-group hierarchy, bulk rule and address-object edits, and filtered CSV/XML export.
Network Topology
Live force-directed map of firewalls, zones, and routed networks, with route lookups and packet tracing.
Syslog Monitoring
PAN-OS syslog ingestion feeds rule-usage data straight back into the optimizer.
EDL Hosting
Host external dynamic lists (IP, domain, URL) as feeds your firewalls pull straight from Pablo.
Panorama Push
Push generated or optimized config back to Panorama with a dry-run preview first.
REST API
Bearer-token API for projects, devices, and optimizer runs — automate the rest.
Download
Enter the activation code from your purchase confirmation to see available
installers. The same code activates Pablo once installed.
Inquire
Questions, a trial, or ready to buy — tell us about your environment
and we'll get back to you.