Release Notes for Firewall Migration Manager, Release 10.0.1
Available Languages
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
- US/Canada 800-553-2447
- Worldwide Support Phone Numbers
- All Tools
Feedback
Feedback
Firewall Migration Manager, Release 10.0.1
Release features overview video
Supported configuration elements for migration
Firewall Migration Manager, Release 10.0.1
Firewall Migration Manager is a network security application with functionality that supports firewall infrastructure transitions, including configuration parsing, feature mapping, policy deployment, and validation. The application includes automated workflows, intelligent rule optimization, and a unified wizard-driven interface to help ensure accuracy, efficiency, and consistency in your network security modernization efforts.
This document describes new features, release-specific details, limitations, and guidelines for the Firewall Migration Manager, Release 10.0.1.
Table 1. Change history to this document since its initial release
| Date |
Change |
Location |
| 2026-07-22 |
Initial release |
_ |
| 2026-08-18 |
PAN to Firewall Threat Defense migration support added |
|
Table 2. New software features for Firewall Migration Manager, Release 10.0.1
| Product impact |
Feature |
Description |
| Base functionality |
PAN to Firewall Threat Defense migration support |
Firewall Migration Manger supports migration of the Palo Alto Network Firewall (PAN) to Firewall Threat Defense. |
| Pre- and post-migration report enhancement |
Offers enhanced pre- and post-migration reports for improved user experience and easier analysis of migrated configurations. |
Release features overview video
Watch the release overview video to learn about the new capabilities, features, and benefits included in this update. Access the video here: Firewall Migration Manager – Release Overview
We recommend you watch this video to gain a thorough understanding of the release and optimize your experience with the new product.
These system requirements must be met to use the Firewall Migration Manager and to deploy features successfully to the target Firewall Management Center:
● Operating System: Microsoft Windows 11 (64-bit) or macOS (version 14 or later).
Note: If you want to perform migration in an air-gapped or isolated environment without internet access, contact Cisco TAC to obtain the air-gapped Firewall Migration Manager installer.
● Browser: Google Chrome (must be set as the system default).
● Licensing: The Firewall Migration Manager application is free. However, the target Firewall Management Center must be properly licensed for the Firewall Threat Defense features you intend to deploy.
● Connectivity: IP network connectivity is required to extract configurations (Live Connect) or to push policies to the Cloud-hosted Management Center.
To avoid compatibility or deployment issues, ensure that you use only the supported ASA and Firewall Threat Defense platforms for Firewall Migration Manager migration. For more information, see Supported ASA and Threat Defense platforms.
For information on supported platforms for PAN to Threat Defense migration, see Supported platforms and versions.
Note: Refer to the Cisco Secure Firewall Management Center Compatibility Guide and Cisco Secure Firewall Threat Defense Compatibility Guide for the most granular list of supported hardware and software versions.
Supported configuration elements for migration
For information on the supported configurations of the Firewall Migration Manager, refer to the link below:
Supported ASA configuration: Supported, partially supported and unsupported configurations.
Supported PAN configuration: Supported configurations.
The following considerations apply when migrating from ASA to Firewall Threat Defense devices using Firewall Migration Manager:
● Manual tasks: Certain configurations, such as ASA trustpoint or certificate migration and specific AnyConnect profile uploads, must be performed manually as part of pre-migration activities.
● Unsupported configurations: Some configurations, such as user-based access control, specific NAT configurations, or transport mode IPsec, are not supported. These must be configured manually on the Firewall Threat Defense device after migration. Refer to Supported configuration elements for migration for supported configuration.
● Device pre-staging: For native Firewall Threat Defense devices, make sure your target device has at least as many physical or port channel interfaces as the source ASA before you start the migration.
For more information, see Migration guidelines and limitations.
This section lists the resources that provide important information for working with Firewall Migration Manager.
Links to Firewall Migration Manager documents:
● Migrating Firewall ASA to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager
● Migrating Firewall PAN to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager
● Firewall Migration Manager Troubleshooting Guide
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2026 Cisco Systems, Inc. All rights reserved