topic Re: ASA config conversion tool in Network Security

ASA config conversion tool

lijomathai — Wed, 27 Sep 2023 01:34:53 GMT

Hi, is there any config conversion tool for concerting Firewall config from traditional ASA 5510 box to firepower 2110 ASA appliance. Both boxes are running on 9.x ASA code

Re: ASA config conversion tool

Marvin Rhoads — Wed, 27 Sep 2023 02:57:13 GMT

There's no tool for this. The configurations are compatible with only the change of interface numbering. So, you can do a few manual edits of the running-config from the 5510 and then just load it on the 2110.

Re: ASA config conversion tool

lijomathai — Thu, 28 Sep 2023 15:47:04 GMT

Thanks for the response, one more query, Do I need to cater for any license for IPsec in the new 2110 Firepower ASA? My current 5510 ASA have couple of IPsec and SSL VPN configured, so i want to port over the same to this new Firepower appliance.

Re: ASA config conversion tool

Marvin Rhoads — Thu, 28 Sep 2023 17:45:22 GMT

You need only the free 3DES-AES license for IPsec VPN. That should automatically appear if your license token had the option to allow export controlled functionality.

SSL VPN will require you to assign Smart licenses by enabling AnyConnect. You must have the licenses in your Smart account. If you have the classic AnyConnect PAK-based licenses in the software.cisco.com LRP you can ask TAC to share them with your smart account. If they are so old that you don't have them there then you would need to purchase new AnyConnect / Secure Client licenses.

Re: ASA config conversion tool

MHM Cisco World — Thu, 28 Sep 2023 17:51:57 GMT

I THINK You need migrate tool for config from asdm to fmc.