To efficiently replace your legacy Virtual FMC and ASA/FTD appliances with new Cisco 1210c appliances managed by your on-prem FMC, you should start by preparing the new 1210c devices in a staging environment. Connect them to your on-prem FMC and assign the necessary management IPs, ensuring that management connectivity (usually on TCP port 8305) is fully functional. Next, use the Cisco Firewall Migration Tool (FMT) to migrate your configuration from the old ASA/FTD devices.(Hence I beleive you have converted your ASA appliance into FTD already in your post) This tool allows you to extract the configuration from your current devices, convert it to a format compatible with FTD, and then import it into your on-prem FMC, targeting the new 1210c appliances. During this process, you’ll need to map interfaces, assign security zones, and validate the configuration. Some features or advanced settings may not migrate automatically, so be prepared to manually adjust those after the initial import.
Once the configuration is ready and validated, schedule a maintenance window for the cutover. Physically replace the old hardware with the new 1210c appliances, update network connections as needed, and verify both management and data plane connectivity. After confirming that traffic is flowing correctly and all security policies are enforced as expected, you can remove the old ASA/FTD devices from the Virtual FMC and decommission the legacy FMC instance once all devices are migrated. It’s important to thoroughly test all critical services, enable logging and monitoring on the new devices, and update your network documentation to reflect the changes. Always ensure you have backups of both old and new configurations and a rollback plan in place in case any issues arise during the migration. By following these steps, you can achieve a smooth and efficient transition to your new Cisco 1210c appliances with minimal disruption.
please do not forget to rate.
