Pix 525 6.3 to ASA 5525-x is it possible

[m.morris]

Hi ,

I have read that it is possible to migrate from a 525 to an ASA via a upgrate to pix asa version 7.0 then using the migration tool once copied to the new ASA 5500 series, but i have alos read in a forum somewhere that a migration from PIX to ASA 5500-x series is not possible,, is this true ? can someone point me in the right direction?

Thanks                  

[James Leinweber]

The 6.3 to 8.6 or 9.x version jump is large enough that you are probably better off writing a new configuration from scratch, than trying to find a migration path.  Two of the big things to watch out for are:

  * at 8.3, the NAT subsystem was completely rewritten.  ACL's now use real addresses, not mapped.  NAT rules use network objects, not ACL's.

  * at 9.0, the v6 support was merged into the v4 access lists.  "any" is dual-stack.

-- Jim Leinweber, WI State Lab of Hygiene