topic Re: migrations errors cisco asa in SmartMove

migrations errors cisco asa

Chris_Stevens — Mon, 02 Jan 2023 10:38:58 GMT

Hi all

It looks like there is some migration issues once migrating from cisco asa.

Looks like if the objects contains -all, -to, -in the objects might not be migrated correct, and some objects are renamed, but not for nat policy. It looks like the objects with -all is not created in the migrated policy.

If migrating several contexts please consider that asdm objects DM_INLINE_NETWORK and DM_INLINE_TCP is auto genrated objects for asdm and is there created objects using CSM these could also have the same name but with diferent content.

Feel free to contact me if you need more details on it.

Re: migrations errors cisco asa

_Val_ — Wed, 04 Jan 2023 12:13:59 GMT

Hi @Chris_Stevens, SmartMove is an open-source tool, so you are welcome to provide your feedback and suggested modifications.

Just in case, here is the GitHub project link: https://github.com/CheckPointSW/SmartMove

Re: migrations errors cisco asa

the_rock — Wed, 04 Jan 2023 17:55:32 GMT

I used smart move 3 times to convert from Cisco to CP and it did work every single time just fine. Yes, you are correct that those objects you mentioned do keep the default name, so thats a bit of an annoyance, but nothing that cant be fixed : - )

Andy

Re: migrations errors cisco asa

Chris_Stevens — Thu, 05 Jan 2023 09:07:06 GMT

I use the tool only for migrating the objects and the policy/nat, and then I use notepad++ to correct both the cfg file before and the output files objects.sh/policy.sh. I create firewall object manual og using vsx_provisioning_tool and import only the object and policy. Correct the zones or the policy and are then good to go. I have mograted about 30 firewalls the last couple of months.