Moving from 5510 to ASAv

[sprocket10]

We are looking at migrating our 5510 ASAs to ASAv. Is it possible to just export the settings from the 5510 and into ASAv?

[Marvin Rhoads]

Not exactly. The ASAv will only have two interfaces. If you're using more than that on the 5510 you'll need a migration scheme.

Also, depending on your ASA version the ASAv (9.3 software) may have different syntax than the ASA 5510 - especially if it's running pre-8.3.

[sprocket10]

The 5510 is on 9.1.4 which is one less than the highest version available for it.

We are also using 4 interfaces, is it possible to have more than 2 on ASAv

[Marvin Rhoads · Accepted solution]

The ASAv only supports two interfaces. The concept for using it is to just deploy additional instances if you need to firewall more than a single pair of zones.

So while your 5510 syntax would be similar, you'd need to pull apart the config into multiple copies, each for a pair of interfaces, to accomplish the segmentation with a couple of ASAv's.