Firewall Migration tool through a Firewall

[glsparks]

How do we get the Firewall Migration tool to run through a Firewall.
What are the Public IP's it needs or the URLs?

[manabans]

The FMT tool needs to be downloaded from the Cisco site. The below guide can be followed for the ASA to FTD migration,
https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide/ASA2FTD-with-FP-Migration-Tool/m-asa-to-threat-defense-migration-workflow.html 

FMT Download Link - https://software.cisco.com/download/home/286331909/type/286321688/release/6.0.0 

[Marvin Rhoads]

I could not locate documentation on the required IPs or URLs, but launching the FMT and watching the log revealed the following URLs at a minimum:

https://sign-on.security.cisco.com
https://api.fp-migtool-dex.com/

#1 is for single sign on and #2 is for telemetry reporting.

If you have an air gapped environment, you can open a TAC support case and request an FMT build that does not require Internet access at all.