ASA to FTD policy migration using tool showing comment..

[NetworkMonkey101]

Hi all,

See the below comment in a few of my policies.. is there something that needs addressing for each of the rules showing this comment?

[Marvin Rhoads]

Yes since it appears you are using an FQDN in the NAT rule but then telling the rule to also lookup the address to determine which interface to route the traffic out of. You should instead specify the desired interface and then remove the route-lookup option from the rule(s). (or else not use FQDN)

[NetworkMonkey101]

Thanks for your reply. I have around 900 policies and there are 100s of these that need applying. 

Is there a way to bulk change the zones for multiple policies with require the same? 

Is there a way to identify exactly which policies need changing instead of checking the comments for each of the 900 policies?