The method you've described of setting up the new ESXi-based firewalls in parallel, and then switching over the network interfaces seems to be a feasible approach, given the restrictions of not being able to create an HA cluster with mixed ENCS and ESXi firewalls.
However, let's focus on a couple of key aspects:
1. **Configuration Baseline**: Before you begin, ensure you have a complete backup and documentation of your current network environment. This will help you compare and validate the new environment setup.
2. **Testing**: Test the ESXi firewalls and their settings thoroughly before making the switch. Any problems that arise after the switch will be harder to troubleshoot.
3. **Rollback Plan**: Keep the original ENCS firewalls in place for a period of time until you are confident that the new setup is stable. This will allow you to revert to the original setup if anything goes wrong.
4. **Monitor**: After the switch, monitor the new environment closely for any anomalies or performance issues.
Remember that changes in infrastructure often uncover underlying issues that were previously hidden. Be prepared for some troubleshooting and fine-tuning after the switch. Thus, your approach seems to be suitable considering the details provided.
Additionally, Cisco provides detailed documentation for replacing firewalls, which can provide further information on this topic. If you want me to search for some resources, let me know.
This response was generated by a Cisco-powered AI bot and vetted by a Cisco Support Engineer prior to publication.
This is part of a monitored experiment to see if the bot can help answer questions alongside community members. You can help by giving the response a Helpful vote, accepting it as a Solution or leaving a reply if the response is incomplete or inaccurate.
