topic ASA migration tools in Network Security

ASA migration tools

carl_townshend — Fri, 21 Feb 2020 15:49:58 GMT

Hi All

Are there any ASA migration tools or checkers you can use when say moving from a 5520 to 5545?

cheers

Re: ASA migration tools

Karsten Iwen — Thu, 31 May 2018 19:48:43 GMT

For my migrations, I never used any tools as I typically don‘t like what they produce. I would look at two different scenarios:

1) the old ASA is running a version < 8.3: then I would first update to 8.4, but dump all the NAT-config and rewrite that from scratch. Then update to 9.1, take that config to the new platform and update to the desired version (I would typically go for 9.8x at the moment).

2) If you are already on 8.3 or newer, update to 9.1 and then move to the new platform, same as above.

Re: ASA migration tools

carl_townshend — Thu, 31 May 2018 21:34:45 GMT

So are you saying just copy and paste in the running config from the old box ?

Re: ASA migration tools

Marvin Rhoads — Fri, 01 Jun 2018 06:06:23 GMT

Karsten has a good point, but I have had good results migrating the NAT configuration using the free tool at tunnelsup.com. They also have a config cleanup tool to identify unused objects and ACLs.

Cisco does have a tool (fwmig) available to partners that works ok for larger migrations. If you're working with a partner SE they should be able to help you with that as an option.