Firewall Migration from ASA with FPS to Secure Firewall with FMT

[boesch]

Hi,

I have an ASA with Firepower Services pair which I want to migrate to a pair of Secure Firewall 3110.

ASA with FPS last version is 6.6, so it has to be managed with an 6.X FMC. FTD3110 is 7.2, so it has to be managed with a 7.2 FMC.

I wanted to do the migration with the Firewall MIgration Tool but that says that source and target FMC has to be the same.

So how is this migration possible?

Thanks in advance, Christian

[manabans]

As per the release notes, FMC 7.2 can support a minimum FPR sensor version of 6.6.
https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/720/threat-defense-release-notes-72/upgrade.html 

The plan could be followed as below:
1. Upgrade FMC to version 7.2 (this could continue to manage any sensor 6.6 and above)
2. Register the FPR 3110 to the FMC
3. Perform the ASA to FTD migration using FMT