topic Re: Configuration migration from PIX to ASA in Network Security

Configuration migration from PIX to ASA

ccs_jet_user — Mon, 11 Mar 2019 11:54:19 GMT

Dear collegues!

Could you help me with my question?

Can I migrate a configuration from PIX515 to ASA5510 in this cases?:

1) PIX OS ver 6 -> ASA OS ver 7

2) PIX OS ver 7 -> ASA OS ver 7

Is the process of configuation migration clear?

What issues could be with configuration migration from PIX to ASA?

Thanks a lot!

Re: Configuration migration from PIX to ASA

m.sir — Mon, 28 Jan 2008 14:50:56 GMT

Here is a step-by-step guide to 6.x to 7.x migration:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807c3627.shtml#c3

Naturally - I would recommend saving a copy of your config and having a fallback plan in the event of any issues.

PIX 6.3 to PIX 7 is automated process

check this link

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807c3627.shtml

Regarding PIX 7 to ASA 7 you shouldnt have any issues - syntax and commands are pretty same s

If you need upgrade from pix 6.3 to ASA 7.0 i suggest upgdrade to PIX 7 and then move to ASA

Hope that helps rate if it does

Re: Configuration migration from PIX to ASA

ccs_jet_user — Mon, 28 Jan 2008 16:22:59 GMT

Thanks a lot!

Re: Configuration migration from PIX to ASA

chitre_salil — Mon, 28 Jan 2008 23:49:31 GMT

Hi,

PIX OS version 6 to ASA OS ver 7 - As long as your config does not contain conduits there should not be any problem.

We had a similar migration recently and we had the complete config ready on the ASA first. We tested the basic access-lists and translations in a test environment before deploying it in production.

Thanks,

Salil

Re: Configuration migration from PIX to ASA

ahpark78 — Tue, 29 Jan 2008 02:48:08 GMT

Yeah, Salil got the point there.

The config should not have contain conduits. It always good to test from the basic configuration like what Salil suggested.

Ken,

http://pixfirewallnotes.blogspot.com