So since there's no easy way of getting the config out of a FMC / Firepower, am I right in assuming that there's no better way to do this than painfully porting the config one rule, object, NAT etc. at a time?
I am pretty sure I know the answer which is "yes. ready, set, go fix!", but I would love to get some confirmation before going through too much of this path of painful exhaustion.