firewall migration from ASA to FTD

[taro75]

I have ASA 5525 standalone firewall and I need to replace this firewall with 2110 FTD HA pair firewalls. The FTD will be managed using web console Firepower Device Manager.

Is there any tool for easy migration?

[Rob Ingram]

@taro75 unfortunately there is no migration to from ASA to locally managed using FDM as the Firepower Migration Tool (FMT) is for migration to FMC management. You could perhaps get a CDO cloud evaluation, migrate the ASA basic configuration and deploy to the FDM then build the HA failover.

https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide-CDO/ASA2FTD_Using_CDO/m_how_to_implement_migration.html

[Karsten Iwen]

I am only aware that CDO has a migration utility: https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide-CDO/ASA2FTD_Using_CDO/ASA2FTD_with_FP_Migration_Tool_cdo_chapter_011.html

A Migration could also be done through the API. But that involves some work on building a script for this.

[MHM Cisco World]

Migrate acl and nat?