Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco Firewall Migration Tool

Download the Firewall Migration Tool

Migrate easily to a new Cisco Secure Firewall from Cisco Adaptive Security Appliance (ASA) with the desktop tool or with Cisco Defense Orchestrator. The desktop tool also supports migrations from third-party vendors Check Point, Palo Alto Networks, and Fortinet.

Firewall Migration Tool v2.4 release updates

Key features

Migration from ASA with FPS to FTD:

  • Migrate ASA configuration to prefilter
  • Migrate FirePOWER Services configuration to access control policy

Migration of site-to-site VPN from ASA to FTD

  • Crypto map (static/dynamic) based VPN from ASA
  • Route-based (VTI) based ASA VPN
  • Certificate-based VPN migration from ASA 

Usability and experience

  • Parsing performance enhancements
  • Share your feedback and scores from within the tool

Continued support in Firewall Migration Tool

Key features

  • Network, service, time range, and fully qualified domain name (FQDN) objects and groups
  • Access rules, Cisco Security Manager object grouping
  • NAT, static routes, IPv6
  • Physical interface, port channels
  • Bridge groups (transparent only)

Supported target and source configurations

Migration to Firewall Management Center (FMC)-managed FTD from:

  • Cisco ASA
  • Check Point R75 to R77, R80
  • Palo Alto Networks
  • Fortinet

Migration to Cisco Defense Orchestrator / locally managed FTD from:

  • Cisco ASA

Related product: firewalls

Secure data centers, offices, and clouds using world-class security controls with unified policy and threat visibility.