ASA to FTD

[Dennis Reynolds]

Hello
I am migrating from an ASA to an FTD 2100 using Cisco's Firewall Migration Tool. My VPN tunnels, policies, and ACLs are not transferring over. 

Has anyone else encountered this?

thank you

[Francesco Molino]

Hi

ACLs should be migrate. VPNs aren't supported if I recall correctly.
Anyways, you have a log folder under the migration tool directory.
Can you share it please to see why your acls aren't migrated?
Is it possible to share your config eventually?

[Dennis Reynolds]

Thank you for your response. I unfortunately do not have any reference configs - this is an issue I am told my end client is having with the Migration Tool. I was just hoping to see if anyone else was having this issue and, if so, what their solution was. 

[Francesco Molino]

For VPN, it's not a feature implemented yet but ACLs work perfectly. You can ask your client to post here the exact result with outputs.
If he talks about ACLs related to VPN configs, then they won't me migrated as well. Also ACLs based on userid aren't supported yet.

[harmesh88]

Dear ,

As per my experience when we are migrating Configuration from ASA to Firepower , Access control list will be migrated but not for VPN its only firewall access list,

SO if you wanted to create same VPN access list that you should create manually in Firepower

for easy VPN Access list configuration - Firepower having Option to add Interesting traffic object in VPN Configuraiton

when you dont have requirement to create specific extended acl configuration you can go with adding network object and group in vpn configuraiton FMC GUI VPN Wizard .