Replacing - Cisco 5525-x to FPR 1120 - NGFW

[satish-khatiwada01]

what is the recommended migration process from ASA 5525-X to FPR 1120?

[Kasun Bandara]

@satish-khatiwada01 hi, recommended way is to use migration tool use below link to access more details about tool.

https://www.cisco.com/c/en/us/td/docs/security/firepower/migration-tool/migration-guide/ASA2FTD-with-FP-Migration-Tool.html

but if your environment have lesser policies, objects etc, you can do manual migration while doing any rule cleanup or settings corrections.

[Marvin Rhoads]

@satish-khatiwada01 

In addition to the migration tool mentioned by @Kasun Bandara , I also recommend to take the opportunity to clean up your access control lists, objects and NAT rules. At the very least, run your ASA config through the cleanup tool at tunnelsup.com.

[johnlloyd_13]

hi,

in addition from other comments, you'll need to decide what OS to run.

do you keep the ASA OS or go for FTD?

a hardware refresh is also a good opportunity to do a config cleanup/standardize.