Migrating from Firepower Module to FTD

[josephjthomas]

Has anyone has any experience migrating from ASA using firepower services to FTD ? I was not able to find if ACP which are used for the Firepower Module can be applied applied to the FTD firewall once the firewall has been upgraded ?

We are currently running on FMC version 5.4.1.9. We are looking to build new FMC on version 6.2.3 and then installing FTD and associating the firewall to the new FMC. 

I am worried if we will have to rebuild the whole ACP once we have finished the upgrade. Please point me to any documentation or post on how approach this upgrade.

Also, with any "gotcha" if you experienced any.

[yogdhanu]

Hi

This guide would be helpful for you.

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/asa2ftd-migration/asa2ftd-migration-guide-620/asa2ftd_intro.html

To answer your question. Migration is done for ASA rules to FTD/FMC compatible rules.

Firepower rules would anyways have to be created manually or the migrated ASA rules would need to be edited to work with firepower features.

As rules from 5.4 cannot be imported on 6.2.3 new FMC.

Hope it helps,

yogesh