Polaris

Translate firewall rules in seconds.

Paste a Palo Alto rule and get the Cisco ASA, Fortinet, or pfSense equivalent. Save hours on migrations, reduce errors, and ship changes with confidence.

Try the Translator (Free)See Pricing

Free tier: 3 translations/day. No signup required.

Example
# Input (PAN-OS set)
set rulebase security rules allow-443 \
  source 10.1.1.0/24 destination 20.2.2.10 service tcp-443 action allow

# Output (Cisco ASA)
object-group network SRC_GROUP
 network-object 10.1.1.0/24
object-group network DST_GROUP
 network-object 20.2.2.10
access-list ACL_OUTSIDE extended permit tcp object-group SRC_GROUP object-group DST_GROUP eq 443
! access-group ACL_OUTSIDE in interface outside
  • Palo Alto Networks
  • Cisco ASA
  • Fortinet
  • pfSense
  • Palo Alto Networks
  • Cisco ASA
  • Fortinet
  • pfSense

Migration speed

Save 2–3 hours per policy pack. Paste once, get vendor-specific commands instantly.

Consistency

Normalized rule schema ensures repeatable outputs across vendors with fewer mistakes.

Security-first

No payloads stored by default. Optional Pro history is encrypted and purgeable.

Pricing

Pay for what you need. Keep it simple for one-off migrations with a 30-day Project Pass, or get in touch for team features.

Free

For quick tests and one-offs.

$0
  • • 3 translations/day
  • • ASA / Fortinet / pfSense output
  • • PAN-OS (set/XML) input
Try free
Best for migrations

Project Pass

Unlimited for 30 days — perfect for a migration window.

$199/30 days
  • • Unlimited translations
  • • Bulk mode & joined scripts
  • • Download vendor-ready packs
  • • Surface warnings & TODOs
Get Project Pass (Soon)

Extendable in additional 30-day blocks.

Team

For MSSPs and ongoing migrations.

Custom
  • • SSO & shared libraries
  • • Usage analytics & audit logs
  • • SLA, support & API access
Contact sales

FAQ

Do you store my rules?

By default, no. We process in-memory. Project Pass users can opt into history, encrypted and deletable in one click.

Which vendors are supported?

Input: Palo Alto (set/XML, Panorama, vsys). Output: Cisco ASA, Fortinet, pfSense. More coming.

How accurate is the translation?

We normalize L3/L4 semantics (src/dst/services/action). Ambiguities are flagged with warnings/TODOs.

Can I extend a Project Pass?

Yes — add additional 30-day blocks as needed. Team plans are available for ongoing work.