Release Notes for Firewall Migration Manager, Release 10.1.0
Available Languages
Bias-Free Language
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
- US/Canada 800-553-2447
- Worldwide Support Phone Numbers
- All Tools
Feedback
Feedback
Firewall Migration Manager, Release 10.1.0
Release features overview video
Supported configuration elements for migration
Firewall Migration Manager, Release 10.1.0
Firewall Migration Manager is a network security application with functionality that supports firewall infrastructure transitions, including configuration parsing, feature mapping, policy deployment, and validation. The application includes automated workflows, intelligent rule optimization, and a unified wizard-driven interface to help ensure accuracy, efficiency, and consistency in your network security modernization efforts.
This document describes new features, release-specific details, limitations, and guidelines for the Firewall Migration Manager, Release 10.1.0.
Table 1. Change history to this document since its initial release
| Date |
Change |
| July 22, 2026 |
Initial release |
| August 18, 2026 |
Support for Palo Alto Networks firewall to Firewall Threat Defense migration |
| October 15, 2026 |
· Support for Check Point firewall to Firewall Threat Defense migration · Support for Fortinet firewall to Firewall Threat Defense migration |
New software features for Release 10.1.0
Firewall Migration Manager, Release 10.1.0 supports:
● Check Point firewall to Firewall Threat Defense migration
● Fortinet firewall to Firewall Threat Defense migration
● Improved site-to-site (S2S) VPN migration
● Network address translation (NAT) zone mapping with route lookup
● External dynamic list (EDL) migration for Palo Alto Networks firewalls
● Panorama-based policy hierarchy migration for Palo Alto Networks firewalls
● Virtual IP (VIP) group migration for Fortinet firewalls
Firewall Migration Manager Videos
Watch the release overview video to learn about the new capabilities, features, and benefits included in this release: Firewall Migration Manager – Release Overview.
We recommend you watch this video to gain a thorough understanding of the release and optimize your experience with the new product.
Here are the videos for the supported firewall migrations using Firewall Migration Manager:
● Migrate from Palo Alto Firewall to Cisco Firewall Threat Defense using Firewall Migration Manager
● Migrate from Fortinet Firewall to Cisco Firewall Threat Defense using Firewall Migration Manager
● Migrate from Checkpoint Firewall to Cisco Firewall Threat Defense using Firewall Migration Manager
Download the Firewall Migration Manager
Step 1. Browse to Cisco Software Download Center and click Firewall Migration Manager.
Step 2. Download the most recent version of the Firewall Migration Manager.
These system requirements must be met to use the Firewall Migration Manager and to deploy features successfully to the target Firewall Management Center:
● Operating System: Microsoft Windows 11 (64-bit) or macOS (version 14 or later).
Note: If you want to perform migration in an air-gapped or isolated environment without internet access, contact Cisco TAC to obtain the air-gapped Firewall Migration Manager installer.
● Browser: Google Chrome (must be set as the system default).
● Licensing: The Firewall Migration Manager application is free. However, the target Firewall Management Center must be properly licensed for the Firewall Threat Defense features you intend to deploy.
● Connectivity: IP network connectivity is required to extract configurations (Live Connect).
To avoid compatibility or deployment issues, ensure that you use only the supported platforms for Firewall Migration Manager migration. Refer:
· For more information on supported platforms for ASA to Threat Defense migration, refer to Supported ASA and Threat Defense platforms.
· For information on supported platforms for Palo Alto Networks firewall to Threat Defense migration, see Supported platforms and versions.
· For information on supported platforms for Check Point to Threat Defense migration, refer to Supported platforms and versions.
· For information on supported platforms for Fortinet to Threat Defense migration, refer to Supported platforms and versions.
Note: Refer to the Cisco Secure Firewall Management Center Compatibility Guide and Cisco Secure Firewall Threat Defense Compatibility Guide for the list of supported hardware and software versions.
Supported configuration elements for migration
For information on the supported configurations of the Firewall Migration Manager, refer to the link below:
· Supported ASA configurations
· Supported Palo Alto Networks firewall configurations
· Supported Check Point firewall configurations
· Supported Fortinet configurations
This section lists the resources that provide important information for working with Firewall Migration Manager.
Links to Firewall Migration Manager documents:
● Migrating Firewall ASA to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager
● Migrating Firewall PAN to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager
● Migrating Fortinet Firewall to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager
● Firewall Migration Manager Troubleshooting Guide
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2026 Cisco Systems, Inc. All rights reserved