topic Re: FMC-FTD Bulk Configuration in Network Security

FMC-FTD Bulk Configuration

John500 — Fri, 21 Feb 2020 17:38:59 GMT

Whats the best approach for Bulk configuration on FMC -> FTD ?

I want to replicate ASA Access policies, objects & services to FTD (managed via FMC), so configuring via FMC takes a lot of time and terribly tedious.

Since we cant configure Access policies on FMC via cli, can we configure FTD (cli) and sync with FMC ? Any thoughts ?

Re: FMC-FTD Bulk Configuration

mikael.lahtela — Thu, 31 Oct 2019 09:54:14 GMT

Have not tried it my self, but you could check Firepower migration tool.
https://software.cisco.com/download/home/286306503/type/286321688/release/1.1.3

Edit: Not sure if you meant ASA config to FMC.

br, Mikael

Re: FMC-FTD Bulk Configuration

Marvin Rhoads — Thu, 31 Oct 2019 14:19:54 GMT

Definitely use the Migration Tool. If you're open to cloud-based management, CDO is a good option also. (It cannot coexist with FMC management though.) CDO has ASA to FTD migration support built-in.

You cannot create Firepower configurations for ACL, objects and service via cli no matter what platform you try it from (but you can via API if you're really good at scripting).