Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
 
← Back to list

Cloudflare One Migration Planner

Plans assessments, policy mappings, and staged rollouts when migrating from Zscaler ZIA/ZPA, Palo Alto, or legacy VPN/SWG stacks to Cloudflare One.

Security & ReviewAdvanced★ 416⑂ 44AI score 7/10Last updated: Sep 6, 2026

What it does

  • Identifies the source stack (Zscaler ZIA/ZPA, Palo Alto NGFW/Prisma/GlobalProtect, legacy VPN/SWG/SD-WAN) and demands the exact structured exports needed per vendor.
  • Builds a full inventory: identities, groups, apps, destinations, connectors/tunnels, DNS/URL/firewall/DLP/TLS policies, objects/lists, locations, exceptions, and hit counts.
  • Produces a mapping plan with source object → Cloudflare One target, confidence, prerequisites, unsupported/partial mappings, and explicit manual decisions.
  • Enforces dependency order (identity/SCIM → connectors → routes/DNS → lists → Access → Gateway → DLP → logging) and stages changes with a migration prefix in disabled/audit mode.
  • Adds validation gates, rollback paths, and a final source-rule accounting table so no rule silently disappears.

Who it's for

  • Network and security engineers replacing Zscaler or Palo Alto with Cloudflare One (Access, Gateway, Tunnel, WARP).
  • Consultants, SEs, and partner engineers running customer SASE migrations.
  • Owners of VPN-replacement programs who must document pilots, parallel runs, and decommission criteria.

Examples

  1. "Map these 400 ZIA URL filtering and SSL inspection rules to Gateway policies" → counts generated lists, and flags CAUTION/warn behavior as an explicit customer decision rather than a silent allow.
  2. "Design Cloudflare Tunnel topology from my ZPA app segments and connector groups" → one tunnel per connector group, cloudflared replicas matched to connector instances, CIDR vs hostname route allocation.
  3. "Run a parity/gap analysis on this Palo Alto rule and object export" → marks App-ID, zone, HIP, and decryption behavior as partial mappings and lists device-posture prerequisites.

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/aiskillstore/marketplace/HEAD/pending/cloudflare/cloudflare-one-migrations/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the pending/cloudflare/cloudflare-one-migrations folder from the GitHub repo aiskillstore/marketplace into my ~/.claude/skills/cloudflare-one-migrations/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/aiskillstore/marketplace.git /tmp/aiskillstore && mkdir -p ~/.claude/skills/cloudflare-one-migrations && cp -r /tmp/aiskillstore/pending/cloudflare/cloudflare-one-migrations/* ~/.claude/skills/cloudflare-one-migrations/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Open a terminal.
  2. Clone the repository: git clone https://github.com/aiskillstore/marketplace.git /tmp/aiskillstore
  3. Create the skill directory: mkdir -p ~/.claude/skills/cloudflare-one-migrations
  4. Copy the files: cp -r /tmp/aiskillstore/pending/cloudflare/cloudflare-one-migrations/* ~/.claude/skills/cloudflare-one-migrations/
  5. Restart Claude Code and confirm cloudflare-one-migrations appears in your skills list.
  6. Try a prompt like "Run a migration assessment from Zscaler ZPA to Cloudflare One" and attach the policy/object/group exports the skill asks for.
  7. Before generating real configuration, re-check current Cloudflare docs and your account limits (for example, Access app destination limits).
View source on GitHub ↗