cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
973
Views
0
Helpful
1
Replies

Cisco PIX to Firepower migration

rshiva62
Level 1
Level 1

We currently have Cisco pix and purchased firepower 2110 with ASA in our lab environment. Can you let me know the best possible way for migration?

1 Reply 1

Marvin Rhoads
Hall of Fame
Hall of Fame

Easiest is to just reproduce the Pix configuration with equivalent functions in ASA 9.x syntax.

 

You should first analyze the Pix configuration to detect and remove any unused configuration lines or stanzas.

 

90% of most firewall configurations are the object, access control lists and NAT rules. These are pretty easily migrated manually.

 

While there are migration tools, they are imperfect and your Pix is far far past end of life so you would likely have to perform a difficult and time-consuming upgrade before getting to a configuration that's even usable with the migration tools

Review Cisco Networking products for a $25 gift card