topic Re: How to bulk change destination zone for imported policies using FM in Network Security https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166692#M1115432 <P>Rules on the ASA configuration are not mapped to zones. They are created within the interface with no zones assigned.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="NetworkMonkey101_0-1724780113800.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/227163i013EC7D1074A2A2C/image-size/medium?v=v2&amp;px=400" role="button" title="NetworkMonkey101_0-1724780113800.png" alt="NetworkMonkey101_0-1724780113800.png" /></span></P><P>&nbsp;</P> Tue, 27 Aug 2024 17:35:23 GMT NetworkMonkey101 2024-08-27T17:35:23Z How to bulk change destination zone for imported policies using FMT https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166616#M1115418 <P>Hi,</P><P>I have imported almost 1000 policies using the FMT and have noticed that the destination zone is not set causing an error. I am looking for a way to either bulk edit destination zones on the FMC or re-import again using the FMT and set using the tool. The destination zone is set to "any" using FMT and there is no option to drop it down to the zones being used.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="NetworkMonkey101_0-1724774366849.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/227137i64F5275E77CC36AB/image-size/medium?v=v2&amp;px=400" role="button" title="NetworkMonkey101_0-1724774366849.png" alt="NetworkMonkey101_0-1724774366849.png" /></span></P><P>Zones are available as seen below so why can I not select them when using the FMT?</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="NetworkMonkey101_1-1724774438576.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/227138iF4711D572E8651C4/image-size/medium?v=v2&amp;px=400" role="button" title="NetworkMonkey101_1-1724774438576.png" alt="NetworkMonkey101_1-1724774438576.png" /></span></P><P>&nbsp;</P> Tue, 27 Aug 2024 16:01:24 GMT https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166616#M1115418 NetworkMonkey101 2024-08-27T16:01:24Z Re: How to bulk change destination zone for imported policies using FM https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166679#M1115426 <P>I've done several dozen FMT-based migrations and never encountered this issue. Normally the ACP entries would be tied to the zone of the associated interfaces. Could it be that they came from a global ACL in the ASA?</P> Tue, 27 Aug 2024 17:16:21 GMT https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166679#M1115426 Marvin Rhoads 2024-08-27T17:16:21Z Re: How to bulk change destination zone for imported policies using FM https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166692#M1115432 <P>Rules on the ASA configuration are not mapped to zones. They are created within the interface with no zones assigned.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="NetworkMonkey101_0-1724780113800.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/227163i013EC7D1074A2A2C/image-size/medium?v=v2&amp;px=400" role="button" title="NetworkMonkey101_0-1724780113800.png" alt="NetworkMonkey101_0-1724780113800.png" /></span></P><P>&nbsp;</P> Tue, 27 Aug 2024 17:35:23 GMT https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166692#M1115432 NetworkMonkey101 2024-08-27T17:35:23Z Re: How to bulk change destination zone for imported policies using FM https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166696#M1115435 <P>Yes, I understand that. But when you migrate the interfaces using FMT you assign them to zones. Those zone associations are then used in the ACP migration step.</P> Tue, 27 Aug 2024 17:41:42 GMT https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166696#M1115435 Marvin Rhoads 2024-08-27T17:41:42Z Re: How to bulk change destination zone for imported policies using FM https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166743#M1115442 <P>I have re-ran the FMT and assigned interfaces to zones as I did before. The only zone that is being applied in the ACP step relates to the DMZ. The inside and outside zones are not being applied to their corresponding policies..</P> Tue, 27 Aug 2024 19:43:29 GMT https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166743#M1115442 NetworkMonkey101 2024-08-27T19:43:29Z Re: How to bulk change destination zone for imported policies using FM https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166746#M1115443 <P>They are stating "no lookup" in the rule name whereas the DMZ rules are OK</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="NetworkMonkey101_0-1724788020470.png" style="width: 400px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/227173iD6871380839966CD/image-size/medium?v=v2&amp;px=400" role="button" title="NetworkMonkey101_0-1724788020470.png" alt="NetworkMonkey101_0-1724788020470.png" /></span></P><P>&nbsp;</P> Tue, 27 Aug 2024 19:47:08 GMT https://community.cisco.com/t5/network-security/how-to-bulk-change-destination-zone-for-imported-policies-using/m-p/5166746#M1115443 NetworkMonkey101 2024-08-27T19:47:08Z