Site to Site VPN Migration from FMC 1000 to FMC x500

[rocky88]

Hi All,

Is there a way to export/import VPNs to a higher model FMC x500 from FMC 1000. Is there any chance of impact on the VPNs while we remove the FTD from Device manager in FMC lower model and then add it again in FMC x500 model. Can there be any chance of service impact doing this?

[Marvin Rhoads]

You can only do a direct migration to x600 FMC appliances. Otherwise you would have to rebuild the configs from scratch.

Either way there would be at least some impact to service because you have to redeploy the configurations to the managed device(s) to sync with the new FMC. At a minimum that would require a Snort restart, interrupting inspection.

[AndreaTornaghi]

Dear,

I don't think that exist an export for S2S VPN, you can try to use API for exporting the conf.