ASA Config changes from 7.2 to 9.2

[William Hoover]

I am going from a PIX 525 to a ASA 5555. I used the PIX2ASA config conversion tool but that would only write a config up to version 7.2 for a 5550, the 5555 is running 9.2. What changes will I need to make to the config to make it work on the 5555, obviously I have to change the interfaces to match the new hardware. I heard there are NAT changes and I have about 300 NAT entries.

Thanks!

[Marvin Rhoads · Accepted solution]

I'd bite the bullet and rebuild it mostly from scratch. That old of a configuration very likely has a lot of unused or obsolete entries. Even if it doesn't, it's a good opportunity to validate them all.

There are a few conversion utilities for NAT and checking unused objects at tunnelsup.com. I've used them successfully many times.

[William Hoover · Accepted solution]

I think you are correct on the bullet biting, I just have to carve out the time to do it.