Cisco ASA 5510 (HA) migration to Cisco Firepower 1140 (HA)

[anuragvadakkekara]

I have requirement of migrating existing Cisco ASA 5510 in HA to Firepower 1140 HA. Understand that we can use Firepower migrating tool  to export ASA config to FMC, then FMC can push the config to FTD. Is there any useful document for FTD 1140 HA config? and whether we can perform the upgrade offline ?

Regards

Anurag

[Marvin Rhoads · Accepted solution]

If your ASA is running version 8.4 or later yes you can use the Firepower Migration Tool (FMT) to migrate to a Firepower appliance running FTD.It's a good idea to cleanup any unused configuration (unused object, ACLs etc.) in your existing configuration first. I recommend this tool:

https://www.tunnelsup.com/config-cleanup/

FMT will migrate the bulk of the configuration but not everything. Some things such as the basic management interface setup and VPNs must be done outside of the FMT process.

Any HA in your new appliances must also be setup separately but that's a pretty simple process and is described here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/high_availability_for_firepower_threat_defense.html#task_686C71A99B5C4CA18FC6681F83B23F45

[anuragvadakkekara]

Thanks Marvin. Will check this out.