Firepower Migration Tool ignoring logical interfaces

1_am_r00t — Thu, 18 Mar 2021 12:51:15 GMT

Hi y'all,

I was in the process to migrate yet another multi-purpose DMZ ASA context to FTD when I encountered an interesting situation.

Firepower Migration Tool successfully detects 8 logical interfaces and 167 access control list lines from the given ASA context configuration file (attachment "fmt1.PNG").

When finally reaching the “Rule conversion/Process config” step, it tells me it could only process 70 access control list lines, regardless the options I’ve set before (attachment "fmt2.PNG"). Be it selecting a "non-HA" FTD from FMC or going for “proceed without FTD” - selecting different features doesn’t change the behavior also.

In the pre-migration report I can see that the tool obviously ignored access control list lines of all logical interfaces not named either “inside”, “outside” or “mgmt” (attachment "fmt3.PNG").

Anybody knows a solution for that or has an idea on how to open a TAC case for Firepower Migration Tool since it's a software without license/serial#?

topic Firepower Migration Tool ignoring logical interfaces in Network Security

Firepower Migration Tool ignoring logical interfaces