topic Re: Replacing - Cisco 5525-x to FPR 1120 - NGFW in Network Security

Replacing - Cisco 5525-x to FPR 1120 - NGFW

satish-khatiwada01 — Thu, 10 Oct 2024 21:31:19 GMT

what is the recommended migration process from ASA 5525-X to FPR 1120?

Re: Replacing - Cisco 5525-x to FPR 1120 - NGFW

Kasun Bandara — Fri, 11 Oct 2024 01:45:22 GMT

@satish-khatiwada01 hi, recommended way is to use migration tool use below link to access more details about tool.

https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide/ASA2FTD-with-FP-Migration-Tool.html

but if your environment have lesser policies, objects etc, you can do manual migration while doing any rule cleanup or settings corrections.

Re: Replacing - Cisco 5525-x to FPR 1120 - NGFW

Marvin Rhoads — Fri, 11 Oct 2024 07:21:27 GMT

@satish-khatiwada01

In addition to the migration tool mentioned by @Kasun Bandara , I also recommend to take the opportunity to clean up your access control lists, objects and NAT rules. At the very least, run your ASA config through the cleanup tool at tunnelsup.com.

Re: Replacing - Cisco 5525-x to FPR 1120 - NGFW

johnlloyd_13 — Sat, 12 Oct 2024 00:31:36 GMT

hi,

in addition from other comments, you'll need to decide what OS to run.

do you keep the ASA OS or go for FTD?

a hardware refresh is also a good opportunity to do a config cleanup/standardize.