The latest iteration (v2.3.4) of the Cisco Secure Firewall Migration Tool adds public beta support for S2S VPN migrations from ASA:
Policy-based (crypto map) Pre-Shared key authentication type VPN configuration to Firepower Management Center
VPN Objects—Creates VPN Objects (IKEv1/IKEv2 Policy, IKEv1/IKEv2 IPsec-Proposal), maps the VPN objects with the specific Site-to-Site VPN topologies, and migrates the objects to Firepower Management Center.
Site-to-Site VPN Topology—The crypto map related configuration in source ASA config are migrated with respective VPN objects. Policy-based (crypto map) VPN Topology are supported on FMC version 6.6 and above.
In this release, Firepower Migration Tool supports migration of static crypto map only. All supported ASA crypto map VPN will be migrated as FMC point-to-point topology.
Expect further enhancements and capabilities in the coming 2.4 release (planned for this summer).
If you have any questions, feedback or are looking for additional features, please engage firstname.lastname@example.org
We have a customer who uses the AnyConnect VPN software to connect to their database and have come up against an issue where the software does not work when the users are in the office. They have advised that they believe this is down to the fact they use...
Hi All,I am trying to clarify disk space sizing for Stealthwatch Enterprise SMC and Flow Collector VMs. As per doc, it states:"FPS Calculation: Allocate a minimum of 1 GB of data storage for every 1,000 flows per second (FPS) your system averages dai...
Good Day, We are in a process of moving from ACS 5.8 to ISE 2.7.We have run the migration tool and it appears to have worked without issue. I checked the policy on the ISE server and we now have a policy set containing 2 elements. Rule 1Con...
Hello, Bit of a while since I've posted here, need some advice. I'm revisiting the configuration for an active/standby ASA HA setup, and I don't think I've ever totally nailed a proven, recommended resilient topology when thinking about th...