topic Re: Cisco CSM to FMC migration in Network Security

Cisco CSM to FMC migration

prashant k y — Fri, 21 Feb 2020 15:48:49 GMT

Hello ,

I have a cisco csm with thousand of rules and hosts and objects and custom services (tcp and UDP)

i want to move all these rules from cisco csm to cisco FMC .

is there a way to do that ?

does cisco officially support this type of migration ?

Cisco CSM version is right now 4.6.0 service pack 1

Thank you for your support .

Re: Cisco CSM to FMC migration

Marvin Rhoads — Sat, 26 May 2018 14:19:32 GMT

No, there's no direct migration path.

You can migrate a deployed ASA configuration using the FMC migration tool.

Watch for a new release of that tool that should be out very soon (next 30 days or so) that greatly improves the current tool (which requires standing up a special purpose FMC)

Re: Cisco CSM to FMC migration

prashant k y — Fri, 01 Jun 2018 11:22:14 GMT

Hey Marvin,

Thanks for your reply but the issue with migration tools is that it only support from ASA to FMC migration.

in my csm i have more than 1000 rules and if i see these rules in ASA they are more in terms of quantity .(more than 5000 Rules)

i do not want to create 5000 rules in FMC.

Have you tried the capability of CSM API and then see any option ?

Thanks Again

Re: Cisco CSM to FMC migration

Marvin Rhoads — Sat, 02 Jun 2018 08:03:02 GMT

I haven't tried the API.

You might have to contract with a third party who has experience with such things. I'd check with Secureview as they created the tool used by Cisco and partners to migrate configurations.

https://www.securview.com/services/integration/firewall-design-implement-and-optimize/