Pix 7.2(2) to ASA 5515 9.2(2) conversion

[beconnect]

Hi,

Is it possible to use ASA migration tool to transfer the configuration from a Pix to a ASA 5515?

If not, what is the alternative? Line by line?

Regards

[nspasov · Accepted solution]

Hi Bruno, 

I have used this tool/link several times in the past:

http://www.tunnelsup.com/nat-converter/

Also, there is a very good post here about this as well:

https://supportforums.cisco.com/document/48646/asa-83-upgrade-what-you-need-know

I hope this helps!

Thank you for rating helpful posts!

[beconnect]

Ok.

I have made it copying all the config.

Some host command in network object creation changed from host "server" to object " server , mainly in access list creation.

I have one ASA configured and want to add another ASA in cluster. the config passes to the second unit when configuring cluster?

Regards

[johnlloyd_13]

hi,

you can use Cisco's own ASA migration tool (can use CCO account):

https://fwm.cisco.com/auth.do

see helpful link:

http://ccnpsecuritywannabe.blogspot.com/2016/01/cisco-asa-firewall-migration-tool.html

i would also still do a line-by-line config check though.

[beconnect]

Hi

Thanks

But does it work for PIX to ASA?

I don't see PIx there..

Regards

[johnlloyd_13]

hi,

PIX is the legacy firewall and has been replaced by ASA a long time ago back in around 2008.

there's a PIX to ASA migration tool as well but it's not downloadable in Cisco.com anymore.

to download the said tool, click here:

https://learningnetwork.cisco.com/thread/29777