topic Re: Migrating configuration from ASA to Firepower in Network Security

Migrating configuration from ASA to Firepower

baskervi — Wed, 23 Sep 2020 20:17:19 GMT

We're looking at migrating our ASA-5510 to a Firepower 2110. Is there a path to convert the existing configuration to something that can be imported into the Firepower? Thanks

Re: Migrating configuration from ASA to Firepower

Rob Ingram — Wed, 23 Sep 2020 20:19:41 GMT

@baskervi

You can use the Firepower Migration Tool (FMT) to migrate the ASA configuration to FTD.

https://www.cisco.com/c/en/us/products/security/firewalls/firepower-migration-tool.html

HTH

Re: Migrating configuration from ASA to Firepower

balaji.bandi — Wed, 23 Sep 2020 20:21:11 GMT

you have FTD Migration tool, but if the rule base is not too big, I do it manually and you get the opportunity to review the rules and get rid of organically grown unnecessary rules. when you moving to a new kit.

Re: Migrating configuration from ASA to Firepower

baskervi — Wed, 23 Sep 2020 20:36:16 GMT

Thanks, both of you. I'll experiment with the tool to see how it goes. We have about 40 explicitly defined rules, but we were liberal with object-groups. It seemed pretty tedious to do this manually, but we do need to review the rules. We'll clean up the configuration as much as possible before running through the tool. Take care.