topic Re: ASA Config changes from 7.2 to 9.2 in Network Security

ASA Config changes from 7.2 to 9.2

William Hoover — Fri, 21 Feb 2020 15:33:16 GMT

I am going from a PIX 525 to a ASA 5555. I used the PIX2ASA config conversion tool but that would only write a config up to version 7.2 for a 5550, the 5555 is running 9.2. What changes will I need to make to the config to make it work on the 5555, obviously I have to change the interfaces to match the new hardware. I heard there are NAT changes and I have about 300 NAT entries.

Thanks!

Re: ASA Config changes from 7.2 to 9.2

Marvin Rhoads — Fri, 23 Mar 2018 03:48:09 GMT

I'd bite the bullet and rebuild it mostly from scratch. That old of a configuration very likely has a lot of unused or obsolete entries. Even if it doesn't, it's a good opportunity to validate them all.

There are a few conversion utilities for NAT and checking unused objects at tunnelsup.com. I've used them successfully many times.

Re: ASA Config changes from 7.2 to 9.2

William Hoover — Fri, 23 Mar 2018 16:47:32 GMT

I think you are correct on the bullet biting, I just have to carve out the time to do it.