topic Re: ASA to FTD in Network Security

ASA to FTD

Dennis Reynolds — Fri, 21 Feb 2020 17:53:01 GMT

Hello
I am migrating from an ASA to an FTD 2100 using Cisco's Firewall Migration Tool. My VPN tunnels, policies, and ACLs are not transferring over.

Has anyone else encountered this?

thank you

Re: ASA to FTD

Francesco Molino — Fri, 31 Jan 2020 03:55:25 GMT

Hi

ACLs should be migrate. VPNs aren't supported if I recall correctly.
Anyways, you have a log folder under the migration tool directory.
Can you share it please to see why your acls aren't migrated?
Is it possible to share your config eventually?

Re: ASA to FTD

Dennis Reynolds — Mon, 03 Feb 2020 06:26:08 GMT

Thank you for your response. I unfortunately do not have any reference configs - this is an issue I am told my end client is having with the Migration Tool. I was just hoping to see if anyone else was having this issue and, if so, what their solution was.

Re: ASA to FTD

Francesco Molino — Tue, 04 Feb 2020 02:23:33 GMT

For VPN, it's not a feature implemented yet but ACLs work perfectly. You can ask your client to post here the exact result with outputs.
If he talks about ACLs related to VPN configs, then they won't me migrated as well. Also ACLs based on userid aren't supported yet.

Re: ASA to FTD

harmesh88 — Tue, 04 Feb 2020 10:10:11 GMT

Dear ,

As per my experience when we are migrating Configuration from ASA to Firepower , Access control list will be migrated but not for VPN its only firewall access list,

SO if you wanted to create same VPN access list that you should create manually in Firepower

for easy VPN Access list configuration - Firepower having Option to add Interesting traffic object in VPN Configuraiton

when you dont have requirement to create specific extended acl configuration you can go with adding network object and group in vpn configuraiton FMC GUI VPN Wizard .