Describe a time you had to migrate firewall rules from a legacy ASA environment to a Palo Alto environment. What challenges did you face?