What problem does it solve? Migrating firewall configurations between vendors is error-prone: each platform uses different syntax, security models, and NAT constructs, and a wrong translation can silently break policy or leak secrets. This Skill converts parsed firewall configs across Cisco ASA/FTD, FortiGate, Palo Alto PAN-OS, and Juniper SRX through a shared intermediate schema, producing a labeled migration draft with inline caveats and a per-section fidelity report. ## Core Features & Use Cases - Schema-pivot conversion: Any parsed source vendor converts to any of the four targets via one emitter per target, covering objects, policies, NAT, zones, interfaces, routing, VPN, and HA. - Fidelity reporting: Every section is classified as converted, converted-with-caveats, or manual-not-converted, with inline # CAVEAT: comments and a list of manual follow-up items. - Secret safety: VPN pre-shared keys, certificates, and passwords are always replaced with placeholders and flagged as manual items, never emitted. - Use Case: You are migrating a FortiGate firewall to a Palo Alto PAN-OS device. Parse the FortiGate config with the matching parsing skill, then run this conversion to get PAN-OS set commands plus a report listing what must be rebuilt manually, such as UTM profile contents and VPN keys. ## Quick Start Convert my parsed FortiGate configuration JSON into Juniper SRX set commands and include the fidelity report with all manual follow-up items.
