There is often a reluctance to change firewall vendors due to the perception that the migration process is difficult. Indeed, there is no point hiding the fact that moving to a new vendor requires careful consideration. But concern over the potential pain of migration should not stand in the way of adopting new security technologies. The purpose of this document is to describe the best practices for performing such migrations, the benefits a migration process can achieve, and ultimately to ease the migration process itself.