topic Re: Cisco Migration Tool in Network Security

Cisco Migration Tool

ja.aljaloud — Thu, 14 Apr 2022 08:22:13 GMT

Hallo,

i do now the Migration for ASA with FPS Module to FMC ver 7.0.1.

after i chooses the Cisco ASA (9.2.2+) with FPS Information and i connect successfully to FMC, iss still Collecting FPS Device.

is it normal to take a long time?

anyone has this before and know how long take?

Thanks in Advanced

Jalo

Re: Cisco Migration Tool

balaji.bandi — Thu, 14 Apr 2022 13:41:15 GMT

depends on ACP it take some time to collect information.

Re: Cisco Migration Tool

ja.aljaloud — Thu, 14 Apr 2022 14:25:32 GMT

what do you mean with ACP?

The configuration File is about 200 KB

Re: Cisco Migration Tool

balaji.bandi — Thu, 14 Apr 2022 15:42:33 GMT

how big rule base i means ? or access policies.

Re: Cisco Migration Tool

ja.aljaloud — Fri, 15 Apr 2022 10:01:32 GMT

there are about 1000 Access Lists and there are VPN SSL

i waited about 50 min and still collecting Devices. Do you how long usaully take this process?

Re: Cisco Migration Tool

Marvin Rhoads — Fri, 15 Apr 2022 13:56:51 GMT

In my experience that step usually takes less than 5 minutes.

The Firepower Migration Tool command window will show you the details of the steps that are being done as they progress.

Re: Cisco Migration Tool

Kasper Elsborg — Wed, 13 Jul 2022 09:45:08 GMT

Hi Jalo. I've had the same problem trying to migrate a 5516-x with firepower to a FTD. Asa code was:

Cisco Adaptive Security Appliance Software Version 9.8(3)8 Firepower Extensible Operating System Version 2.2(2.97) Device Manager Version 7.9(2)152

I chose the ASA 9.2.2+ with fps as source. This is when I've got the problem

Then I chose the ASA 8.4+ and it did run correctly.

It's perhaps due to I've had no snort rules at all, on the source ASA.

Br. Kasper

Re: Cisco Migration Tool

balag24 — Fri, 28 Jul 2023 07:23:41 GMT

Hello @Marvin Rhoads

I am using the FMT 4.0.3-8417 for mac and at the SSO page after the Duo Security authentication, all im getting is a black window with "null" text. How can I overcome this step. Thanks. I have attached the screenshot fyi. It is the same result with any browser I use on my mac.

this is the URL it is directing to..
'''
http://localhost:8888/api/callback?state=JB2F6DCLRJF82DT2DFLQ&error=access_denied&error_description=User+is+not+assigned+to+the+client+application.

But the FMT does not need any licensing as per my understanding. What has to be done to get assigned. Thanks.

Re: Cisco Migration Tool

Marvin Rhoads — Fri, 28 Jul 2023 15:11:49 GMT

The tool does indeed NOT require licensing. But I suspect they are tying something on the backend to Firepower software entitlement. You should be able to open a TAC case using either your Firepower appliance or FMC entitlement to have then check the tool issue for you.

Re: Cisco Migration Tool

balag24 — Fri, 04 Aug 2023 07:36:20 GMT

Hello, Yes the answer is we need to have an active SNTC or Contract under your Cisco ID for a Firepower device or ASA. After I imported the contract of the device under my ID, the login now works and I am able to use the Migration tool. Thanks a lot.