Automated firewall migration tools

Answered Question
Dec 22nd, 2009

Hello Everyone,

We are going to be replacing a sonicwall with a Cisco ASA.

Does Cisco provide any utilities that could automate the migration process? In particular, we have about 20 site to site VPNs with external organizations. If we could avoid having to re-do those, that would be great.

Also, in addition to being able to automate the configuration, what about an utilities to simply analyze the sonicwall and determine if there are any configurations that won't be moved over?

Any suggestions would be great. If you have any experience with the utlities, please indicate how it went.

Thanks,

Ben

I have this problem too.
0 votes
Correct Answer by sachinraja about 6 years 11 months ago

Hi Ben

Cisco does provide tools for migrating its security products, like PIX to ASA... Since Cisco has the cli commands for PIX, and its latest ASA commands, the tool would provide assitance migrating... but to migrate from a 3rd party firewall, im not sure if there are any tools available as of now ! the cli/gui of firewalls from different vendors might look really different, and hence an automated tool is tough to be considered for this case...

Since firewalls are such critical components, it is good for you to build the ASA configurations, seeing the sonicwall configs.. It is also a good oppurtunity to clean up unnecessary configurations (if any) on your old firewall, and have an updated config template on your new ASA firewall....

Hope this helps.. All the best..

Raj

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
sachinraja Tue, 12/22/2009 - 11:55

Hi Ben

Cisco does provide tools for migrating its security products, like PIX to ASA... Since Cisco has the cli commands for PIX, and its latest ASA commands, the tool would provide assitance migrating... but to migrate from a 3rd party firewall, im not sure if there are any tools available as of now ! the cli/gui of firewalls from different vendors might look really different, and hence an automated tool is tough to be considered for this case...

Since firewalls are such critical components, it is good for you to build the ASA configurations, seeing the sonicwall configs.. It is also a good oppurtunity to clean up unnecessary configurations (if any) on your old firewall, and have an updated config template on your new ASA firewall....

Hope this helps.. All the best..

Raj

Benjamin Waldon Thu, 12/24/2009 - 09:27

Thanks Raj,

Yeah, I wasn't really too hip on the idea of importing it all over, becuase it brings all the junk with it.

But, I was just curious

Actions

This Discussion