cloudflare-one-migrations

Automates network and security stack migration to Cloudflare One with assessment and policy mapping.

2.6k|242|Updated Dec 10, 2025
One-click install
npx skills add https://github.com/cloudflare/skills --skill cloudflare-one-migrations-cloudflare
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: cloudflare-one-migrations
Source: https://github.com/cloudflare/skills/tree/main/skills/cloudflare-one-migrations
Command: npx skills add https://github.com/cloudflare/skills --skill cloudflare-one-migrations-cloudflare

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of migrating network and security stacks, such as Zscaler ZIA/ZPA, Palo Alto, legacy VPN, SWG, or SASE stacks, to Cloudflare One. It simplifies the assessment, policy mapping, rollout planning, and parity/gap analysis for these migrations.

Core Features & Use Cases

  • Assessment & Mapping: Automates the identification of source stacks and the mapping of policies and configurations to Cloudflare One.
  • Rollout Planning: Assists in creating detailed migration plans with dependencies and pilot phases.
  • Gap Analysis: Identifies differences between source and target environments, enabling parity and gap analysis.
  • Use Case: A network engineer planning a migration from a legacy VPN to Cloudflare One can use this Skill to assess the migration feasibility, map policies, and create a detailed rollout plan.

Quick Start

Use the cloudflare-one-migrations skill to perform a migration assessment for your legacy VPN to Cloudflare One.

Frequently Asked Questions about cloudflare-one-migrations

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate from Zscaler ZIA or ZPA to Cloudflare One?

To migrate from Zscaler ZIA or ZPA to Cloudflare One, you can automate the assessment of source configurations, map existing policies, and perform a parity and gap analysis to ensure a precise transition.

What is the best way to map security policies when moving from Palo Alto to Cloudflare One?

Mapping security policies from Palo Alto to Cloudflare One is best handled by automating the identification of your source stack and translating configurations directly to match Cloudflare One capabilities.

Can I assess legacy VPN migration feasibility to Cloudflare One?

Yes, you can assess legacy VPN migration feasibility to Cloudflare One by analyzing your source network configurations and comparing them against target capabilities to identify any gaps.

How do I plan a rollout for a SASE stack migration to Cloudflare One?

Planning a rollout for a SASE stack migration to Cloudflare One involves creating a detailed migration plan that outlines dependencies, maps policies, and defines pilot phases for a confident transition.

Does Cloudflare One migration support gap analysis for SWG stacks?

Yes, Cloudflare One migration supports gap analysis for SWG stacks by identifying differences between your source environment and target capabilities, enabling thorough parity checks.

What do I need to perform a parity analysis for a network migration to Cloudflare One?

To perform a parity analysis for a network migration to Cloudflare One, you need to provide your source stack configurations so the assessment can compare them with Cloudflare One features.