Conversion tool - CheckPoint FW to Cisco ASA

[Anand Kanani]

Cisco has recently opened up a self-service tool to convert CheckPoint Firewall configurations to Cisco ASA configs.

https://fwmig.cisco.com/

It is open to all the users registered on the Cisco website.

Try it out and let us know your feedback

The same tool also supports the migration of Juniper Netscreen Firewall configurations to Cisco ASA

https://supportforums.cisco.com/community/netpro/security/firewall/blog/2013/09/27/conversion-tool-juniper-screenos-to-cisco-asa

Thanks

Anand

[Shera]

Hi Anand,

link https://fwmig.cisco.com/ shows

"

Page Unavailable - Server Unavailable Error 503"

is the service down?

[vijay.salvi]

Hello Anand,

Thank you for the Migration tool.

I have went through the data collection stage and it has been mention 8 files should be present with zip but after running checkpoint Web Visualization Tool i do have a single HTML file.

i can have route.txt file but how to collect remaining 7 files ?

[vijay.salvi]

I have same doubt ..

any resolution which has sorted this problem ?

please share with me 

[Anand Kanani]

Hi Vijay

If you follow the Data Collection steps given exactly, then you will get those 7 XML files. Otherwise usually the output is a single HTML file which is actually a combined version of those XML files itself.

[Kheiron2711]

Is there a way to set the "Use global ACL" to no?

[MELVIN LEONARD ALCALA]

hi.  i ran the migration tool and it worked for me.  however, what version of asa does is the output applicable to?  is it applicable to 9.x version?

sorry found it on faq's.  thanks

[ccoffey]

I'm trying to migrate from a checkpoint but seem to have an issue with my route.txt

ERROR: No default route found, hence cannot continue further

here is a snippet of the file 

INTERFACE|SUBNET|MASK|0.0.0.0|INTERFACENAME
INTERFACE|10.5.250.16|255.255.255.240|143.5.250.22|eth-s1/s1p1c0
INTERFACE|10.125.76.80|255.255.255.240|155.125.76.86|eth-s1/s1p1c2
INTERFACE|192.168.0.2|255.255.255.224|192.44.118.37|eth-s1/s1p2
INTERFACE|127.0.0.1|255.0.0.0|0.0.0.0|loopback0
ROUTE|SUBNET|MASK|NEXT-HOP|INTERFACENAME
ROUTE|0.0.0.0|0.0.0.0|192.168.0.1|eth-s1/s1p2c0

[mjwulff01]

Has the tool moved or been taken down? The page is now showing 503 unavailable

[Andrew_L_Kahn]

@mjwulff01, i'm seeing the same thing.  Hopefully cisco get's it back.

[gbengaolojede]

I am currently trying to use the conversion tool for checkpoint to ASA to Firepower migration.
I have downloaded the Web Visualization Tool (WVT) from Checkpoint website, but each time I try to install the exec file on my PC, I see the error below

""The code execution cannot proceed because OS.dll was not found. Reinstalling the program may fix this problem"

Can anyone suggest how  can resolve this as I have tried to reinstall the program severally.

[BartlomiejSmajdor90415]

Hello 

https://fwmig.cisco.com

https://fwmig.cisco.com is down - looks like it's not resolvable in DNS

[BartlomiejSmajdor90415]

Is this tool going to be ever brought back up? I found it very useful. 

Currently down - seems like DNS issue.