Home
Support
Product Support
Security
Firewall Migration Manager
Install and Upgrade Guides

Migrating Cisco Secure Firewall ASA to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Migrating Cisco Secure Firewall ASA to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Expand all sections

About this content

About Firewall Migration Manager

Firewall Migration Manager overview
Features in Firewall Migration Manager
Default home page
How ASA to threat defense migration works

Migration Requirements

Licensing requirements
Platform requirements
Threat Defense device prerequisites for ASA migration
Supported ASA and Firewall Threat Defense platforms
Target Management Center requirements
Supported software versions for firewall migration
Supported, partially supported and unsupported configurations
Migration guidelines and limitations

Pre-migration Tasks

Download the Firewall Migration Manager
Obtain ASA configuration files
Export PKI certificates from ASA and import into Management Center
Retrieve AnyConnect packages and profiles

ASA to Threat Defense Migration Workflow

Run the migration
Upload ASA source configuration
Specify destination parameters
Map ASA configurations with Firewall Threat Defense interfaces
Map ASA interfaces to security zones, interface groups, and VRFs
Review and validate the migration configuration
Review the post-migration report

Migrating Cisco Secure Firewall ASA to Cisco Secure Firewall Threat Defense Using Firewall Migration Manager

Download the Firewall Migration Manager

Updated: July 22, 2026

Want to summarize with AI?

Learn how to download the Firewall Migration Manager for installation on your local Windows or macOS system. This topic also explains how to access the cloud-hosted version of the application through your Security Cloud Control tenant to begin migrating your firewall configurations.

Download the Firewall Migration Manager to migrate your firewall configurations to Secure Firewall devices.

Before you begin

Ensure you have administrative rights to install Firewall Migration Manager on your local machine.
You must have a Windows 10 64-bit machine or macOS version 10.13 or higher, with internet connectivity to Cisco.com.

Procedure

	1.	Browse to https://software.cisco.com/download/home/286345745/type and click Firewall Migration Manager.
	2.	Download the most recent version of the Firewall Migration Manager. Ensure that you download the appropriate executable of the Firewall Migration Manager for Windows or macOS machines.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.