--- title: Firepower Migration Tool description: Migrating from an ASA firewall to a Firepower Threat Defense (FTD) all-in-one appliance? Cisco provides a migration tool to help with the transition. --- [![looking-point_LogoWhite _ Presidio-1](https://www.lookingpoint.com/hubfs/looking-point_LogoWhite%20_%20Presidio-1.svg) ![LOOKINGPOINT](https://www.lookingpoint.com/hs-fs/hubfs/Theme%20Oct%202019/images/logo@mobile.png?width=444&height=86&name=logo@mobile.png) ](https://www-lookingpoint-com.sandbox.hs-sites.com/-temporary-slug-c10ae2f5-f23e-43f2-8214-f73884fb09ae) - [Solutions](https://www.lookingpoint.com) - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration) - [Security ](https://www.lookingpoint.com/it-solutions-security) - [Networking ](https://www.lookingpoint.com/it-solutions-networking) - [Data Center ](https://www.lookingpoint.com/data-center) - [Cloud](https://www.lookingpoint.com/cloud) - [Managed Services](https://www.lookingpoint.com/it-support-services) - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela) - [Services](https://www.lookingpoint.com/en/solutions-services) - [Assess and Design ](https://www.lookingpoint.com/assess-and-design-it-solutions) - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions) - [Support](https://www.lookingpoint.com/it-support-services) - [Wireless Surveys Assessments](https://www.lookingpoint.com/en-us/wireless-surveys-assessments) - [Project Management ](https://www.lookingpoint.com/project-management) - [Integration Center](https://www.lookingpoint.com/integration-services) - [Lifecycle Support](https://www.lookingpoint.com/it-lifecycle-support) - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area) - [Customer Success](https://www.lookingpoint.com/services-customer-success) - [Partners](https://www.lookingpoint.com/partner) - [Blog](https://www.lookingpoint.com/blog) - [Solutions](https://www.lookingpoint.com) - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration) - [Security ](https://www.lookingpoint.com/it-solutions-security) - [Networking ](https://www.lookingpoint.com/it-solutions-networking) - [Data Center ](https://www.lookingpoint.com/data-center) - [Cloud](https://www.lookingpoint.com/cloud) - [Managed Services](https://www.lookingpoint.com/it-support-services) - [Services](https://www.lookingpoint.com/en/solutions-services) - [Assess and Design](https://www.lookingpoint.com/assess-and-design-it-solutions) - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions) - [Support](https://www.lookingpoint.com/it-support-services) - [Wireless Survey Assessment](https://www.lookingpoint.com/en-us/wireless-surveys-assessments) - [Project Management ](https://www.lookingpoint.com/project-management) - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela) - [Integration Center](https://www.lookingpoint.com/integration-services) - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area) - [Customer Success](https://www.lookingpoint.com/services-customer-success) - [Partners](https://www.lookingpoint.com/partner) - [Blog](https://www.lookingpoint.com/blog) - [+1 925-566-3480](tel:+1%20925-566-3480) - [DO NOT SHARE OR SELL MY PERSONAL INFORMATION](https://na1.hs-data-privacy.com/request/TrvvEe3VpnlESmYolHn3xw) - [![phone@2x](https://www.lookingpoint.com/hubfs/Theme%20Oct%202019/fonts/phone@2x.png) +1 925-566-3480 ](tel:+19255663480) - [![user@2x](https://www.lookingpoint.com/hubfs/Theme%20Oct%202019/fonts/user@2x.png) Acela Portal ](https://my.lookingpoint.com/) - [Free Consultation](https://www.lookingpoint.com/blog/firepower-migration-tool#get-free-popup) Let’s Connect [Home](https://www.lookingpoint.com/) [Blog](https://www.lookingpoint.com/blog) Firepower Migration Tool # Blog Aug 2 Firepower Migration Tool Posted by [Rick Wong](https://www.lookingpoint.com/blog/author/rick-wong) [**0](https://www.lookingpoint.com/blog/firepower-migration-tool#comments-listing) ** Share - [**](https://www.facebook.com/sharer/sharer.php?u=https://www.lookingpoint.com/blog/firepower-migration-tool&title=Firepower%20Migration%20Tool&picture=&description=Migrating%20from%20an%20ASA%20firewall%20to%20a%20Firepower%20Threat%20Defense%20(FTD)%20all-in-one%20appliance?%20Cisco%20provides%20a%20migration%20tool%20to%20help%20with%20the%20transition.) - [**](https://twitter.com/intent/tweet?source=https://www.lookingpoint.com/blog/firepower-migration-tool&text=Firepower%20Migration%20Tool) - [**](https://plus.google.com/share?url=https://www.lookingpoint.com/blog/firepower-migration-tool) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.lookingpoint.com/blog/firepower-migration-tool&title=Firepower%20Migration%20Tool&summary=Migrating%20from%20an%20ASA%20firewall%20to%20a%20Firepower%20Threat%20Defense%20(FTD)%20all-in-one%20appliance?%20Cisco%20provides%20a%20migration%20tool%20to%20help%20with%20the%20transition.) - [**](mailto:?subject=Firepower%20Migration%20Tool&body=Firepower%20Migration%20Tool%20https://www.lookingpoint.com/blog/firepower-migration-tool) [VPN](https://www.lookingpoint.com/blog/topic/vpn) [ACL](https://www.lookingpoint.com/blog/topic/acl) [Access Control Lists](https://www.lookingpoint.com/blog/topic/access-control-lists) [ASA](https://www.lookingpoint.com/blog/topic/asa) [Cisco Firepower](https://www.lookingpoint.com/blog/topic/cisco-firepower) [ASA Firewall](https://www.lookingpoint.com/blog/topic/asa-firewall) [NAT](https://www.lookingpoint.com/blog/topic/nat) [idap](https://www.lookingpoint.com/blog/topic/idap) [Firewall Threat Defense](https://www.lookingpoint.com/blog/topic/firewall-threat-defense) [Network Address Translations](https://www.lookingpoint.com/blog/topic/network-address-translations) [VTI](https://www.lookingpoint.com/blog/topic/vti) [Dynamic Routing](https://www.lookingpoint.com/blog/topic/dynamic-routing) [SNMP](https://www.lookingpoint.com/blog/topic/snmp) [Syslog](https://www.lookingpoint.com/blog/topic/syslog) [radius](https://www.lookingpoint.com/blog/topic/radius) [tacas](https://www.lookingpoint.com/blog/topic/tacas) [Firepower Migration](https://www.lookingpoint.com/blog/topic/firepower-migration) [FMC](https://www.lookingpoint.com/blog/topic/fmc) ![](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7) Thinking about migrating from an ASA firewall to a Firepower Threat Defense (FTD) all-in-one appliance?  Instead of manually inputting the entire configuration from an ASA to an FTD, Cisco provides a migration tool to help with the transition.  This tool, aptly named the firepower migration tool, has limitations but it can help migrate objects, access control lists (ACLs) and network address translations (NATs) that otherwise would have to be manually migrated from the ASA to the FTD.  This tool becomes more valuable when there are multiple ASAs with hundreds of ACL entries, objects and NATs.       ## Platform requirements The migration tool requires the following to run: - Windows 10 or MacOS 10.13 or higher - Google Chrome   ## Limitations Here are the limitations of the migration tool: **The following configuration are not migrated because it is not supported by the FTD:** - - Route based VPNs are not support by FTD. - Local user accounts. - Nested object-groups.   **The following configuration are not migrated and requires manual configuration after the migration:** - - VPNs: Anyconnect client vpn or site-to-site vpn - Dynamic routing - IP SLAs and tracking - Device specific configurations such as snmp, syslog, netflow, radius, tacacs, ldap, etc **ASA version needs to be 8.4 and higher.**   ## Migration Process 1. Download the migration tool for the desired platform from cisco.com using a CCO account. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-164.png?width=600&name=image-164.png) 2. Run the executable ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-165.png?width=600&name=image-165.png) **Note: Do not close the cmd window.  Closing this window will exit the migration tool.**![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-166.png?width=600&name=image-166.png) 3. Login with a CCO account to share statistics with Cisco or use the local default account to login **Default local account:** **Username: admin** **Password: Admin123** 4. Select a source for the migration. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-167.png?width=391&name=image-167.png) 5. Select manual upload of the configuration or connect to  ASA as the source of the configuration. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-168.png?width=600&name=image-168.png) The migration will parse the data from the ASA configuration. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-169.png?width=600&name=image-169.png) 6. Connect to the FMC where the FTDs are registered. You can still use the tool if there are no FTDs registered.  Interfaces and routes will not be migrated if no FTD is present. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-170.png?width=438&name=image-170.png) 7. Select a target FTD to apply the migrated configuration. If no FTD devices are registered with the FMC, interfaces and routes will not be migrated.   ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-171.png?width=600&name=image-171.png) 8. Select the features to be migrated and start the conversion. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-172.png?width=600&name=image-172.png)![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-173.png?width=600&name=image-173.png)![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-174.png?width=600&name=image-174.png) 9. Download and review the pre-migration report. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-175.png?width=600&name=image-175.png)![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-176.png?width=600&name=image-176.png)![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-177.png?width=600&name=image-177.png)![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-178.png?width=600&name=image-178.png) 10. Map the ASA interfaces and to FTD interfaces and security zones. This section only applies if an FTD is the target device from step 7. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-179.png?width=566&name=image-179.png) If no FTD target device is selected the Map FTD Interface option is not available. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-180.png?width=482&name=image-180.png) 11. Review and validate the migrated configuration. Any errors reported during validation will need to be corrected before proceeding. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-181.png?width=582&name=image-181.png) 12. Push the configuration to the FMC after successful validation. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-182.png?width=530&name=image-182.png)![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-183.png?width=600&name=image-183.png) 13. Download and review the migration report after the migration is complete. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-184.png?width=600&name=image-184.png) 14. Login to the FMC. NATs, ACLs and Objects are now populated by the migration tool. ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-185.png?width=600&name=image-185.png) ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-186.png?width=600&name=image-186.png) ![Firepower Migration Tool](https://www.lookingpoint.com/hs-fs/hubfs/image-187.png?width=600&name=image-187.png)   As always if you have any questions on getting Cisco's Firepower set up for you and your business and would like to schedule a free consultation with us, please reach out to us at [sales@lookingpoint.com](mailto:sales@lookingpoint.com) and we’ll be happy to help! [![Contact Us](https://no-cache.hubspot.com/cta/default/2215854/7814218f-8d49-4d01-9a8c-095c00c0b08d.png)](https://cta-redirect.hubspot.com/cta/redirect/2215854/7814218f-8d49-4d01-9a8c-095c00c0b08d)   Written By: Rick Wong, Principal Network Architect SHARE: - [**](https://www.facebook.com/sharer/sharer.php?u=https://www.lookingpoint.com/blog/firepower-migration-tool&title=Firepower%20Migration%20Tool&picture=&description=Migrating%20from%20an%20ASA%20firewall%20to%20a%20Firepower%20Threat%20Defense%20(FTD)%20all-in-one%20appliance?%20Cisco%20provides%20a%20migration%20tool%20to%20help%20with%20the%20transition.) - [**](https://twitter.com/intent/tweet?source=https://www.lookingpoint.com/blog/firepower-migration-tool&text=Firepower%20Migration%20Tool) - [**](https://plus.google.com/share?url=https://www.lookingpoint.com/blog/firepower-migration-tool) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.lookingpoint.com/blog/firepower-migration-tool&title=Firepower%20Migration%20Tool&summary=Migrating%20from%20an%20ASA%20firewall%20to%20a%20Firepower%20Threat%20Defense%20(FTD)%20all-in-one%20appliance?%20Cisco%20provides%20a%20migration%20tool%20to%20help%20with%20the%20transition.) - [**](mailto:?subject=Firepower%20Migration%20Tool&body=Firepower%20Migration%20Tool%20https://www.lookingpoint.com/blog/firepower-migration-tool) ### Topics - [cisco](https://www.lookingpoint.com/blog/topic/cisco) - [security](https://www.lookingpoint.com/blog/topic/security) - [cybersecurity](https://www.lookingpoint.com/blog/topic/cybersecurity) - [Cisco ISE](https://www.lookingpoint.com/blog/topic/cisco-ise) - [collaboration](https://www.lookingpoint.com/blog/topic/collaboration) - [ISE](https://www.lookingpoint.com/blog/topic/ise) - [webex](https://www.lookingpoint.com/blog/topic/webex) - [IT Solutions](https://www.lookingpoint.com/blog/topic/it-solutions) - [cisco webex](https://www.lookingpoint.com/blog/topic/cisco-webex) - [SD-WAN](https://www.lookingpoint.com/blog/topic/sd-wan) ### Latest Tweets ** ### subscribe to our blog ## Get New Unique Posts ![looking-point_LogoWhite _ Presidio-1](https://www.lookingpoint.com/hubfs/looking-point_LogoWhite%20_%20Presidio-1.svg) 391 Taylor Blvd. Suite 120 Pleasant Hill, California 94523 [Call Us +1 925-566-3480](tel:+19255663480) [sales@lookingpoint.com](mailto:sales@lookingpoint.com) - [**](https://www.facebook.com/lookingpoint?fref=ts) - [**](https://twitter.com/lookingpoint) - [**](https://www.linkedin.com/company/lookingpoint) - [**](https://www.instagram.com/lookingpoint/) SOLUTIONS - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration) - [ Security](https://www.lookingpoint.com/it-solutions-security) - [Networking ](https://www.lookingpoint.com/it-solutions-networking) - [Cloud](https://www.lookingpoint.com/cloud) - [Data Center ](https://www.lookingpoint.com/data-center) - [Project Management ](https://www.lookingpoint.com/project-management) - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela) - [Wireless Surveys Assessments](https://www.lookingpoint.com/en-us/wireless-surveys-assessments) MANAGED SERVICES - [Assess and Design](https://www.lookingpoint.com/assess-and-design-it-solutions) - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions) - [Support](https://www.lookingpoint.com/it-support-services) - [Integration Center](https://www.lookingpoint.com/integration-services) - [Lifecycle Support](https://www.lookingpoint.com/it-lifecycle-support) - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area) - [Customer Success](https://www.lookingpoint.com/services-customer-success) COMPANY - [Contact Us](https://www.lookingpoint.com/contact-us) - [Career](https://www.lookingpoint.com/career) - [About Us](https://www.lookingpoint.com/about-us) - [ FAQ](https://www.lookingpoint.com/faq) - [ Partners](https://www.lookingpoint.com/partner) - [Blog](https://www.lookingpoint.com/blog) - [Privacy Policy](https://www.lookingpoint.com/privacy-policy) - [DO NOT SELL OR SHARE MY PERSONAL INFORMATION](https://na1.hs-data-privacy.com/request/TrvvEe3VpnlESmYolHn3xw) GET IN TOUCH Join our mailing list to stay up to date and get notices about our new releases! Looking Point Inc. 2026 Cookie Settings