Migrating Firewall from ASA

[fatalXerror]

Hi Guys,

Hope all are okay.

I am tasked to migrate our firewall from ASA to a non-Cisco firewall and it includes firewall clean up. I would to ask in an ASA standpoint, what are the strategies for the engineer to determine duplicates and non-used policies? Also, how can I determine the traffic passing through permit any any rule so that I can create a separate rule for those traffic and eventually disable the permit any any rule.

Thank you

[Sheraz.Salim]

you can use a software  CLI Analyser. link here https://community.cisco.com/t5/network-security/cisco-cli-analyzer-2-0-released-in-addition-to-asa-we-now/td-p/2866138

https://software.cisco.com/download/home/286311499/type/286312309/os/Windows%2010%20(x64)/release/3.6.8

you can configure a syslog server to off load you logs messages to see what traffic is going through or you can set up a capture on firewall.