Explore Cisco
How to Buy

Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco Firewall Migration Tool

Download the Firewall Migration Tool

Migrate easily to a new Cisco Secure Firewall from Cisco Adaptive Security Appliance (ASA) with the desktop tool or with Cisco Defense Orchestrator. The desktop tool also supports migrations from third-party vendors Check Point, Palo Alto Networks, and Fortinet.

Firewall Migration Tool v2.5 release updates

Unlocking migrations to Threat Defense 7.1:

  • Support to migrate wildcard masks from ASA to FTD
  • Validated and tested migration path to Threat Defense 7.1

Configuration optimization when migrating from ASA to FTD (public beta)

  • Identify redundant and shadowed rules and provide users with the following rule options: remove, migrate disabled, or migrate fully
  • Comprehensive reporting on configuration optimization for access rules and objects
  • Streamlined object optimizations: remove unreferenced objects, reuse existing objects, and resolve inconsistent objects

Continued support in Firewall Migration Tool

Key features

  • Network, service, time range, and fully qualified domain name (FQDN) objects and groups
  • Access rules, Cisco Security Manager object grouping, wildcard masks
  • NAT (Network Address Translation), static routes, IPv6
  • Physical interface, port channels
  • Bridge groups (transparent only)

Supported target and source configurations

Migration to Firewall Management Center (FMC)-managed FTD from:

  • Cisco ASA
  • Check Point R75 to R77, R80
  • Palo Alto Networks
  • Fortinet

Migration to Cisco Defense Orchestrator / locally managed FTD from:

  • Cisco ASA

Related product: firewalls

Secure data centers, offices, and clouds using world-class security controls with unified policy and threat visibility.