Cisco CSM to FMC migration

[prashant k y]

Hello ,

I have a cisco csm with thousand of rules and hosts and objects and custom services (tcp and UDP)

i want to move all these rules from cisco csm to cisco FMC .

is there a way to do that ?

does cisco officially support this type of migration ?

Cisco CSM version is right now 4.6.0 service pack 1 

Thank you for your support .

[Marvin Rhoads]

No, there's no direct migration path.

You can migrate a deployed ASA configuration using the FMC migration tool.

Watch for a new release of that tool that should be out very soon (next 30 days or so) that greatly improves the current tool (which requires standing up a special purpose FMC)

[prashant k y]

Hey Marvin,

Thanks for your reply but the issue with migration tools is that it only support from ASA to FMC migration.

in my csm i have more than 1000 rules and if i see these rules in ASA they are more in terms of quantity .(more than 5000 Rules)

i do not want to create 5000 rules in FMC.

Have you tried the capability of CSM API and then see any option ?

Thanks Again

[Marvin Rhoads]

I haven't tried the API.

You might have to contract with a third party who has experience with such things. I'd check with Secureview as they created the tool used by Cisco and partners to migrate configurations.

https://www.securview.com/services/integration/firewall-design-implement-and-optimize/