cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1517
Views
0
Helpful
2
Replies

Migrating ASA Multi-Context to FTD Multi-Instance

mikiNet
Level 1
Level 1

Hello,

I preparing for migration from ASA Multi-Context to FTD-Instance. I read below document, but I don't find answer for my question:

https://community.cisco.com/t5/security-blogs/migrating-asa-multi-context-to-ftd-multi-instance/ba-p/3893465

Maybe someone can answer for it:

1. I have running version 6.7 on FTD and FMC, do you have information if FMT(Firepower Migration Tool) will work on this version ? 

2. At this moment our Cisco Firepower 4110 with ASA module working in Failover Active/Standby. I have a question about migration:

   a) Should I first implement one FPR9300 without failover, migrate all configs from Active ASA and on the end implement second FPR9300 without any config and then configure failover ? So that second FPR9300 will synchronize with first node and download all config

b) Should I implement two FPR9300, add them to FMC, create Failover Active/Standby and then start process of migration from ASA to FTD ?

2 Replies 2

Marvin Rhoads
Hall of Fame
Hall of Fame

1. Yes FMT will work with Firepower 6.7.

2. Either approach will work. FMT doesn't migrate any failover configuration elements so it doesn't matter if you have the target FTD setup as HA before or after the migration. I'd recommend migrating to a standalone FTD to start just to keep things simpler.

Thanks Marvin,

Yes, I know that FMT dosen't migrate any failover config, but it migrate interface configuration so it could have importance.

So you recomend first migrate to standalone FTD and on the end configure HA between two new FTD ?

Review Cisco Networking for a $25 gift card