topic Move config from one ASA to another in Network Security

Move config from one ASA to another

brivan — Tue, 12 Mar 2019 00:38:16 GMT

I'm upgrading ASA firewalls from a 5510 (running 8.2.2 code) to a 5515-X (running 8.6.1 code). What is the best way to move the existing config to the new firewall? Can I simply copy it?

Move config from one ASA to another

julomban — Mon, 17 Dec 2012 22:27:36 GMT

Hello,

The NAT rules are not the same so you cannot copy and paste those rules from the ASA5510 into the 5515-X.

Below you can find a very good doc about new NAT config and NAT examples:

https://supportforums.cisco.com/docs/DOC-9129

Regards,

Juan Lombana

Please rate helpful posts.

Move config from one ASA to another

Stephen Brady — Tue, 18 Dec 2012 18:38:33 GMT

I have done a few of these, definitely read through the docs posted by the last poster. The other thing you can do is if you have a spare ASA you can copy the configuration onto that running the same code version that you are running currently. Then perform the upgrade to 8.6(1) and it will migrate your NAT statements and access rules automatically. I would do it offline and then compare the results Old to New, then check the document posted above for what the migration should look like.