topic Re: How to migrate Cisco ASA configuration to Check Point R80 Management Server database? in SmartMove https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/102839#M250 <P>I did use same tool for a customer to convert cisco asa config to cp and it worked well, but I did notice certain objects did get messed up. Im wondering if there is a good way to move over vpn users and that configuration over...but might be tricky, as its smart-1 cloud server, not actual on prem, so there is no ssh or web UI.</P> Sat, 21 Nov 2020 13:45:09 GMT the_rock 2020-11-21T13:45:09Z How to migrate Cisco ASA configuration to Check Point R80 Management Server database? https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/13063#M245 <HTML><HEAD></HEAD><BODY><P>How to migrate Cisco ASA configuration to Check Point R80 Management Server database?</P></BODY></HTML> Sun, 19 Nov 2017 09:33:42 GMT https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/13063#M245 Robert_Decker 2017-11-19T09:33:42Z Re: How to migrate Cisco ASA configuration to Check Point R80 Management Server database? https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/13064#M246 <HTML><HEAD></HEAD><BODY><P style="color: #24292e; margin-bottom: 16px;">Check Point&nbsp;<A href="https://github.com/CheckPoint-APIs-Team/SmartMove">SmartMove tool</A> enables you to convert 3rd party database with firewall security policy and NAT to Check Point database.</P><P style="color: #24292e; margin-bottom: 16px;">At the moment, the tool parses Cisco ASA, Juniper JunosOS and ScreenOS configurations and converts its objects, NAT and firewall policy to a Check Point R80.10 compliant policy. The tool is planned to support additional vendors and security configurations in the future.</P><P style="color: #24292e; margin-bottom: 16px;">The tool generates bash scripts by utilizing Check Point Management API's command line interface, to migrate the converted policy into a R80.10 Management (or Multi-Domain) server.</P></BODY></HTML> Sun, 19 Nov 2017 09:42:14 GMT https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/13064#M246 Robert_Decker 2017-11-19T09:42:14Z Re: How to migrate Cisco ASA configuration to Check Point R80 Management Server database? https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/13065#M247 <HTML><HEAD></HEAD><BODY><P>Currently, the following Cisco configurations can be migrated:</P><P></P><TABLE border="1" cellpadding="4" style="color: #000000; background-color: #ffffff; font-size: 14px;"><TBODY><TR style="background-color: lightgray;"><TD>Supported Appliances</TD><TD>Supported Software</TD></TR><TR><TD><A href="https://www.cisco.com/c/en/us/products/security/adaptive-security-appliance-asa-software/index.html" style="color: #905690; text-decoration: none; font-size: 14px;" target="_blank">Cisco ASA</A></TD><TD><UL><LI>version 8.3 and above</LI></UL></TD></TR></TBODY></TABLE><P></P><P>Enjoy.</P></BODY></HTML> Sun, 19 Nov 2017 09:49:27 GMT https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/13065#M247 Robert_Decker 2017-11-19T09:49:27Z Re: How to migrate Cisco ASA configuration to Check Point R80 Management Server database? https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/94004#M248 <P>Hello</P><P>On cisco asa configuration we have the below</P><P>object network object-192.168.0.237<BR />nat (internal,outside) static 192.168.0.237</P><P>and the smart move tool creates 2 manual static rules.</P><P>Original Source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Original Destination&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Original Services&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Translated Source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Translated Destination&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Translated Services<BR />object-192.168.0.237&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; any&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; any&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; host_192.168.0.237(Nat method static)&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; original&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; original<BR />any&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; host_192.168.0.237&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; any&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; original&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; object-192.168.0.237(Nat method static) &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; original</P><P>Do you think they are needed on checkpoint configuration ?</P><P>BR,<BR />Kostas</P><P>&nbsp;</P> Thu, 13 Aug 2020 10:04:17 GMT https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/94004#M248 Konstantinos_In 2020-08-13T10:04:17Z Re: How to migrate Cisco ASA configuration to Check Point R80 Management Server database? https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/94291#M249 <P>NAT to itself? I don't think it's required.</P> Mon, 17 Aug 2020 05:24:11 GMT https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/94291#M249 PhoneBoy 2020-08-17T05:24:11Z Re: How to migrate Cisco ASA configuration to Check Point R80 Management Server database? https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/102839#M250 <P>I did use same tool for a customer to convert cisco asa config to cp and it worked well, but I did notice certain objects did get messed up. Im wondering if there is a good way to move over vpn users and that configuration over...but might be tricky, as its smart-1 cloud server, not actual on prem, so there is no ssh or web UI.</P> Sat, 21 Nov 2020 13:45:09 GMT https://community.checkpoint.com/t5/SmartMove/How-to-migrate-Cisco-ASA-configuration-to-Check-Point-R80/m-p/102839#M250 the_rock 2020-11-21T13:45:09Z