I am trying to replace a pix 505e vpn/firewall with the asa5505. Could the configuration file from the pix 506e be loaded into the asa 5505. If so, please provide detail steps.
Hardware Firewalls
Last Comment
Garry Glendown
8/22/2022 - Mon
Garry Glendown
General answer: no.
Less general answer (educated guess, though I haven't tried it - only did upgrades on 515 before): Depending on the amount of memory, you may be able to upgrade the 506 to a software release from the 7.x train, which would convert the old config to a newer style. Running the same (or similar) version on the ASA, you could copy&paste relevant parts (while taking care to modify the interface names etc.) to the ASA, then upgrade the ASA to the release you want/need. Not sure if it's worth the hassle, though. Configuring the ASA from scratch may be the better choice, for one you get rid of unused stuff, plus you learn your way around the new system.
Shen
ASKER
Thnak you for your response. I agree with you. I read about a conversion tool, but you have to upgrade the pix506 first to version 7 as you stated and then it may not work well. I will do it from scracth.
Question - Our inside network is on the 10.100.1.xx, the asa come with 192.168.1.x. For me to change the inside network interface to 10.100.1.254, I could only do it through the console connection?
Less general answer (educated guess, though I haven't tried it - only did upgrades on 515 before): Depending on the amount of memory, you may be able to upgrade the 506 to a software release from the 7.x train, which would convert the old config to a newer style. Running the same (or similar) version on the ASA, you could copy&paste relevant parts (while taking care to modify the interface names etc.) to the ASA, then upgrade the ASA to the release you want/need. Not sure if it's worth the hassle, though. Configuring the ASA from scratch may be the better choice, for one you get rid of unused stuff, plus you learn your way around the new system.