topic Re: FWSM migration to Checkpoint R80.10 in SmartMove https://community.checkpoint.com/t5/SmartMove/FWSM-migration-to-Checkpoint-R80-10/m-p/25387#M290 <HTML><HEAD></HEAD><BODY><P>Pretty sure you can, but I'll let someone who knows better confirm. I did it for one of my clients in the past, however we migrated from a whole bunch of ASA's over to a 15600 cluster running R77.30. We used LCMS for the conversion.</P><P></P><P>I tell you, from my experience, nothing is guaranteed to work as you expect. Be prepared to add missing rules on the go. I found that LCMS missed a tonne of rules, which took a while to sort out, along with NAT rules. Mind you though, we had multiple ASA's that had several internet links, so some were blocking similar inbound traffic.. All together we had over 20k ACL's combined, but LCMS was able to shrink it down to just around 800 IIRC.</P><P></P><P>I would HIGHLY recommend exporting your NAT's out to excel. Once you convert(Whether LCMS/Manual script), check check check!</P></BODY></HTML> Tue, 22 May 2018 20:35:41 GMT Ray_Lal 2018-05-22T20:35:41Z FWSM migration to Checkpoint R80.10 https://community.checkpoint.com/t5/SmartMove/FWSM-migration-to-Checkpoint-R80-10/m-p/25386#M289 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P>Is it possible to migrate FW &amp; NAT policies, objects from Cisco FWSM to R80.10. SmartMove most probably doesnt support FWSM yet but i was wondering if the old Confwiz would work ?</P></BODY></HTML> Tue, 22 May 2018 18:56:18 GMT https://community.checkpoint.com/t5/SmartMove/FWSM-migration-to-Checkpoint-R80-10/m-p/25386#M289 Moe_89 2018-05-22T18:56:18Z Re: FWSM migration to Checkpoint R80.10 https://community.checkpoint.com/t5/SmartMove/FWSM-migration-to-Checkpoint-R80-10/m-p/25387#M290 <HTML><HEAD></HEAD><BODY><P>Pretty sure you can, but I'll let someone who knows better confirm. I did it for one of my clients in the past, however we migrated from a whole bunch of ASA's over to a 15600 cluster running R77.30. We used LCMS for the conversion.</P><P></P><P>I tell you, from my experience, nothing is guaranteed to work as you expect. Be prepared to add missing rules on the go. I found that LCMS missed a tonne of rules, which took a while to sort out, along with NAT rules. Mind you though, we had multiple ASA's that had several internet links, so some were blocking similar inbound traffic.. All together we had over 20k ACL's combined, but LCMS was able to shrink it down to just around 800 IIRC.</P><P></P><P>I would HIGHLY recommend exporting your NAT's out to excel. Once you convert(Whether LCMS/Manual script), check check check!</P></BODY></HTML> Tue, 22 May 2018 20:35:41 GMT https://community.checkpoint.com/t5/SmartMove/FWSM-migration-to-Checkpoint-R80-10/m-p/25387#M290 Ray_Lal 2018-05-22T20:35:41Z