firepower cutover plan

Abd Mhd — Fri, 21 Feb 2020 15:46:21 GMT

dear all,

as I have to replace two of asa with two of firepower

regardless in configuration issue

can you help in cutover plan to avoid downtime

BR,

Re: firepower cutover plan

Florin Barhala — Wed, 16 May 2018 07:05:43 GMT

First of all, can you detail HW and SW for old models and new models?

Re: firepower cutover plan

Marius Gunnerud — Wed, 16 May 2018 11:03:12 GMT

There will always be a drop in traffic when you migrate. however this can be minimized in certain situations. So there are two ways you can do this. First you can do a clean cutover, or you can migrate in phases (ASA and FTD are online parallel).

For a clean cutover do the following:

1. migrate configuration from ASA to FTD

2. connect FTD to the network (remember to keep the interfaces in a shutdown state either on the FTD or on the switch it connects to or you will have IP address conflicts)

3. Shutown interfaces going to ASA

4. No shutdown interfaces going to FTD

5. check connectivity and troubleshoot if needed

For running in parallel:

1. migrate configuration from ASA to FTD

2. Change interface IPs on FTD (IPs should be in the same subnet and VLANs as the IPs on the ASA)

3. connect FTD to the network

4. Change default gateway on PCs and/or servers (when doing this, if you have webservers you would need to take into account that you might need to migrate the public IPs at the time of migration unless you are also able to allocate a new IP and just update DNS)

5. check connectivity and troubleshoot if needed

topic Re: firepower cutover plan in Network Security

firepower cutover plan

Re: firepower cutover plan

Re: firepower cutover plan