Cisco Migration Tool

[ja.aljaloud]

Hallo,

i do now the Migration for ASA with FPS Module to FMC ver 7.0.1.

after i chooses the Cisco ASA (9.2.2+) with FPS Information and i connect successfully to FMC, iss still Collecting FPS Device.

is it normal to take a long time?

anyone has this before and know how long take?

Thanks in Advanced

Jalo

[balaji.bandi]

depends on ACP it take some time to collect information.

[ja.aljaloud]

what do you mean with ACP?

The configuration File is about 200 KB

[balaji.bandi]

how big rule base i means ? or access policies.

[ja.aljaloud]

there are about 1000 Access Lists and there are VPN SSL

i waited about 50 min and still collecting Devices. Do you how long usaully take this process?

[Marvin Rhoads]

In my experience that step usually takes less than 5 minutes.

The Firepower Migration Tool command window will show you the details of the steps that are being done as they progress.

[balag24]

Hello @Marvin Rhoads 

I am using the FMT 4.0.3-8417 for mac and at the SSO page after the Duo Security authentication, all im getting is a black window with "null" text. How can I overcome this step. Thanks. I have attached the screenshot fyi. It is the same result with any browser I use on my mac. 

this is the URL it is directing to..
'''
http://localhost:8888/api/callback?state=JB2F6DCLRJF82DT2DFLQ&error=access_denied&error_description=User+is+not+assigned+to+the+client+application.

But the FMT does not need any licensing as per my understanding. What has to be done to get assigned. Thanks. 

[Marvin Rhoads]

The tool does indeed NOT require licensing. But I suspect they are tying something on the backend to Firepower software entitlement. You should be able to open a TAC case using either your Firepower appliance or FMC entitlement to have then check the tool issue for you.

[balag24]

Hello, Yes the answer is we need to have an active SNTC or Contract under your Cisco ID for a Firepower device or ASA. After I imported the contract of the device under my ID, the login now works and I am able to use the Migration tool. Thanks a lot. 

[Kasper Elsborg]

Hi Jalo. I've had the same problem trying to migrate a 5516-x with firepower to a FTD. Asa code was:

Cisco Adaptive Security Appliance Software Version 9.8(3)8 
Firepower Extensible Operating System Version 2.2(2.97)
Device Manager Version 7.9(2)152

I chose the ASA 9.2.2+ with fps as source. This is when I've got the problem

Then I chose the ASA 8.4+ and it did run correctly. 

It's perhaps due to I've had no snort rules at all, on the source ASA.

Br. Kasper