cloudflare-one-migrations

Automates network and security stack migration to Cloudflare One with assessment and policy mapping.

2.6k|242|Updated Dec 10, 2025
One-click install
npx skills add https://github.com/cloudflare/skills --skill cloudflare-one-migrations-cloudflare
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloudflare-one-migrations
Source: https://github.com/cloudflare/skills/tree/main/skills/cloudflare-one-migrations
Command: npx skills add https://github.com/cloudflare/skills --skill cloudflare-one-migrations-cloudflare

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the challenge of migrating network and security stacks, such as Zscaler ZIA/ZPA, Palo Alto, legacy VPN, SWG, or SASE stacks, to Cloudflare One. It simplifies the assessment, policy mapping, rollout planning, and parity/gap analysis for these migrations.

Core Features & Use Cases

  • Assessment & Mapping: Automates the identification of source stacks and the mapping of policies and configurations to Cloudflare One.
  • Rollout Planning: Assists in creating detailed migration plans with dependencies and pilot phases.
  • Gap Analysis: Identifies differences between source and target environments, enabling parity and gap analysis.
  • Use Case: A network engineer planning a migration from a legacy VPN to Cloudflare One can use this Skill to assess the migration feasibility, map policies, and create a detailed rollout plan.

Quick Start

Use the cloudflare-one-migrations skill to perform a migration assessment for your legacy VPN to Cloudflare One.

Frequently Asked Questions about cloudflare-one-migrations

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I migrate from Zscaler ZIA or ZPA to Cloudflare One?▼

To migrate from Zscaler ZIA or ZPA to Cloudflare One, you can automate the assessment of source configurations, map existing policies, and perform a parity and gap analysis to ensure a precise transition.

What is the best way to map security policies when moving from Palo Alto to Cloudflare One?▼

Mapping security policies from Palo Alto to Cloudflare One is best handled by automating the identification of your source stack and translating configurations directly to match Cloudflare One capabilities.

Can I assess legacy VPN migration feasibility to Cloudflare One?▼

Yes, you can assess legacy VPN migration feasibility to Cloudflare One by analyzing your source network configurations and comparing them against target capabilities to identify any gaps.

How do I plan a rollout for a SASE stack migration to Cloudflare One?▼

Planning a rollout for a SASE stack migration to Cloudflare One involves creating a detailed migration plan that outlines dependencies, maps policies, and defines pilot phases for a confident transition.

Does Cloudflare One migration support gap analysis for SWG stacks?▼

Yes, Cloudflare One migration supports gap analysis for SWG stacks by identifying differences between your source environment and target capabilities, enabling thorough parity checks.

What do I need to perform a parity analysis for a network migration to Cloudflare One?▼

To perform a parity analysis for a network migration to Cloudflare One, you need to provide your source stack configurations so the assessment can compare them with Cloudflare One features.