Migrate From ASA 5506 to FPR 1120

[john.garza]

We have a number of Cisco ASA 5506 devices that we are going to replace with Cisco FPR 1120 devices.  The Cisco ASA 5506 devices have been running just fine for several years.  Is there a Migration Tool of some sort that will let us copy the running configuration from an ASA 5506 to an FPR 1120?  Also someone mentioned that we would have to first Re-image the FPR 1120 with an ASA image on the FPR ?

[marce1000]

           - FYI : https://www.cisco.com/c/en/us/products/security/secure-firewall-migration-tool/index.html

 M.

[Rob Ingram]

@john.garza how do you intend to manage the new FPR1120 devices, locally using FDM or centrally via FMC or CDO (cloud)?

If locally using FDM there is no migration tool, you'd have to manually configure the new device.

If using FMC then you can use the Firepower Migration Tool. https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide/ASA2FTD-with-FP-Migration-Tool.html

If using CDO cloud then you can import the ASA into CDO with all it's configuration, then deploy to the new devices. https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide-CDO/ASA2FTD_Using_CDO/m_how_to_implement_migration.html

The FPR1120 hardware can be ordered with two images, either the ASA or NGFW (FTD) image, just order with the correct image. You should not need to reimage.