Migrating ASA Multi-Context to FTD Multi-Instance

[mikiNet]

Hello,

I preparing for migration from ASA Multi-Context to FTD-Instance. I read below document, but I don't find answer for my question:

https://community.cisco.com/t5/security-blogs/migrating-asa-multi-context-to-ftd-multi-instance/ba-p/3893465

Maybe someone can answer for it:

1. I have running version 6.7 on FTD and FMC, do you have information if FMT(Firepower Migration Tool) will work on this version ? 

2. At this moment our Cisco Firepower 4110 with ASA module working in Failover Active/Standby. I have a question about migration:

   a) Should I first implement one FPR9300 without failover, migrate all configs from Active ASA and on the end implement second FPR9300 without any config and then configure failover ? So that second FPR9300 will synchronize with first node and download all config

b) Should I implement two FPR9300, add them to FMC, create Failover Active/Standby and then start process of migration from ASA to FTD ?

[Marvin Rhoads]

1. Yes FMT will work with Firepower 6.7.

2. Either approach will work. FMT doesn't migrate any failover configuration elements so it doesn't matter if you have the target FTD setup as HA before or after the migration. I'd recommend migrating to a standalone FTD to start just to keep things simpler.

[mikiNet]

Thanks Marvin,

Yes, I know that FMT dosen't migrate any failover config, but it migrate interface configuration so it could have importance.

So you recomend first migrate to standalone FTD and on the end configure HA between two new FTD ?