any tool to migrate from a Nokia/CheckPoint firewall to CISCO ASA

[guillerm]

Would like to know if there is any tool that could help to migrate CheckPoint firewall objects and rules database to CISCO ASA equivalent ;

Could the last CISCO Security Manager product help in this process ?

thanks in advance

[JORGE RODRIGUEZ]

Joel, you may need to use a firewall analyser or fw auditing tools to retreave fw rules from Nokia/Fw-1 in a legibel format like using LFA, but you still need to manually entered the configuration into ASA.

Check this link and look for (LFA) Lumeta firewall analyser, they work along with checkpoint..

http://www.lumeta.com/

Also reference this thread, it may help.

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=General&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.1dd7e5c4

HTH

Jorge

[swconnexnml · Accepted solution]

Hi Joel, plse check this link:

http://cisco.com/cgi-bin/tablebuild.pl/sct

Cisco Security Conversion Tool

Regards,

-steve

[guillerm]

Steve,

thanks a lot for your answer ;

I have started to use SCT : this tool is not bad at all ;

it will certainly avoid me some nightmares

[Anand Kanani]

Here is the new self-service tool that Cisco has released to convert to any vendor firewalls to Cisco ASA.

Currently it supports Juniper ScreenOS and CheckPoint to Cisco ASA conversion.

Link to the original post:

https://supportforums.cisco.com/community/netpro/security/firewall/blog/2013/12/19/conversion-tool--checkpoint-fw-to-cisco-asa

Link to the tool itself:

https://fwmig.cisco.com