09-12-2023 06:21 AM
Hello
We require an expert's assistance for the migration of FortiGate to Firepower Threat Defense (FTD) as part of our technological refresh initiative within End user request. Currently, there is no provision for the acquisition of a Firepower Management Center (FMC) on their end, as their deployment consists of a single Firepower Threat Defense (FTD) device. My inquiry pertains to the management approach for this solitary FTD unit, which presumably involves utilizing Firepower Device Manager (FDM).
A challenge we face is the dependency on the Cisco migration tool, which necessitates the presence of an FMC to facilitate configuration deployment to the FTD. It's important to note that utilizing this migration tool would result in the removal of all existing configurations within the FTD during the management process via the FMC.
Therefore, my primary concern is how to ensure the uninterrupted operation of the FTD within the FDM environment post-migration, without a recurrent configuration wipeout. Preliminary investigations have indicated that unmanaging the FTD from the FMC also leads to the removal of its configuration.
To address this challenge, we have temporarily acquired a trial version of the FMC for the migration process. However, it is essential to emphasize that our client is not inclined to integrate permanent FMC into their existing infrastructure. Is it still possible to do this migration?
09-12-2023 12:50 PM
Just migrate it manually - i.e. have a qualified engineer examine the Fortigate configuration section by section and recreate it using FDM.
09-13-2023 05:40 AM
it will took longer to do manually as the client have many policies and routing.
09-13-2023 05:53 AM
Well your choices are to either use the migration tool (requires FMC - but could be cloud-delivered FMC) or do it manually.
I migrated one manually several years ago with about 200 rules in the policy (prior to the tool supporting Fortigate).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide