Avatar of Shen
Flag for United States of America asked on

asa 5505 to replace old pix506e vpn/firewall

I am trying to replace a pix 505e vpn/firewall with the asa5505. Could the configuration file from the pix 506e be loaded into the asa 5505. If so, please provide detail steps.
Hardware Firewalls

Avatar of undefined
Last Comment
Garry Glendown

8/22/2022 - Mon
Garry Glendown

General answer: no.
Less general answer (educated guess, though I haven't tried it - only did upgrades on 515 before): Depending on the amount of memory, you may be able to upgrade the 506 to a software release from the 7.x train, which would convert the old config to a newer style. Running the same (or similar) version on the ASA, you could copy&paste relevant parts (while taking care to modify the interface names etc.) to the ASA, then upgrade the ASA to the release you want/need. Not sure if it's worth the hassle, though. Configuring the ASA from scratch may be the better choice, for one you get rid of unused stuff, plus you learn your way around the new system.

Thnak you for your response. I agree with you. I read about a conversion tool, but you have to upgrade the pix506 first to version 7 as you stated and then it may not work well.  I will do it from scracth.  

Question - Our inside network is on the 10.100.1.xx, the asa come with 192.168.1.x. For me to change the inside network interface to, I could only do it through the console connection?
Garry Glendown

View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes