New to firewall configuration

[CMT_Chris]

I have never configured a firewall in my 25+ years in I.T. Currently, we are using the Sonicwall product configured by the previous I.T. Admin. I bought a Meraki MX68 to replace the Sonicwall product. Need to know how I can export/import (convert, I geuss) Sonicwall to Meraki. Please keep in mind, I need simple steps in order to initially get this up and running. Any help is greatly appreciated.

[KarstenI]

There won't be any easy export/import. These devices are completely different. You should better contact a Cisco partner to get it configured for you. This will be better for your security.

[CMT_Chris]

Ok. Thank you.

[Inderdeep]

As it is different already said by @KarstenI . you can have a look on this 

https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/MX_Firewall_Settings 

[GIdenJoe]

The sonicwall has a quite complex NAT and policy ruleset.  You really need someone that can interpret the Sonicwall correctly to understand and implement the ruleset on your Meraki device.

[CMT_Chris]

I guess I am finding out that I will have to open both side by side and manually configure the Meraki based on the settings in SonicWall. Thanks for the response. I appreciate it.

[CMT_Chris]

 I have started from scratch with MX68. I am using the Installation Guide. I performed the first step, Configuring the Uplink with the IP address provide by my ISP. This same IP address is configured in our Sonicwall firewall. Since I am new to the firewall config, I want to be sure I don't hinder my users. So my question is, now that I have the Uplink configured, is it safe to plug this into my network when other custom settings have been done? Will it conflict with the Sonicwall?

[cmr]

@CMT_Chris if you connect it alongside the Sonicwall with both using the same IP then you will break your network.  At the very best the Meraki firewall will just not work.

If most of your traffic is outbound then I'd say the easiest option is to temporarily connect the WAN port of the MX to the LAN of the Sonicwall and then start recreating the rules.  You can then connect a computer to the LAN ports on the Meraki to test your copied rules.  This won't risk service interruptions.

If you have internal services that external people connect to, like servers or a client VPN, then that is easy to swap over in a maintenance window.

[CMT_Chris]

In addition to the last questions, I have not assigned a LAN IP address to the Meraki just yet. That is why I am asking before I plug it into the network. As it stands, I do have it connected to my laptop (not on the network).

[GIdenJoe]

Also when you try to add firewall rules to the Meraki firewall that do not contain any local subnets you may get an error at saving.  There is a sanity check which can get in the way especially in cloning network that wants to force only rules that would have any chance in matching source IP addresses.