SRX Services Gateway
Highlighted
SRX Services Gateway

Firewall conversion

‎07-19-2016 06:59 AM

Hello, I want to know if it is possible to convert our Firewall ASA 5540 configuration file to Juniper SRX 5400. If this is how is it done for the conversion?

As part of this move, The SRX 5400 Firewalls need to be reprogrammed the same way as the ASA. Could you please advise on a way to ease this process, and make it eas and smooth. 

 

Thanks,

5 REPLIES 5
Highlighted
SRX Services Gateway

Re: Firewall conversion

‎07-19-2016 03:53 PM

Unfortunately, there is no conversion tool for the ASA to SRX.  This will need to be a manual process.  Juniper does have a tool for Cisco IOS to Junos, but there are significant differences to the ASA style that this may not save you much time.

 

https://i2j.juniper.net/release/index.jsp

 

After you run the config through here, you could post questions about specific sections that are not recognized.  We may need some kind of network diagram as well depending on the features.

 

If this is too daunting, you can look for a Juniper Partner to assist, but that would obviously require a budget.

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
Highlighted
SRX Services Gateway

Re: Firewall conversion

‎07-19-2016 03:59 PM
Please check with your Juniper account team. They were able to direct me to a site that helped convert our ASA to SRX... Saved us MANY, MANY man hours.

Sam
Highlighted
SRX Services Gateway

Re: Firewall conversion

‎07-19-2016 06:43 PM

Hi,

 

Cisco ASA configuration is completely different from IOS which runs on other cisco devices, hence the IOS to Junos converting tool would not be of much help.

 

You have two options :-

  1. Perform the conversion manually.
  2. Get support from Advanced Services Team.

Regards,

Sahil Sharma

---------------------------------------------------

Please mark my solution as accepted if it helped, Kudos are appreciated as well.

Highlighted
SRX Services Gateway

Re: Firewall conversion

‎07-20-2016 09:59 AM

Thank you everybody for your help.

 

So what about PIX/ASA to Junos converter? They could Help?

If yes does it exist in a new version?

Highlighted
SRX Services Gateway

Re: Firewall conversion

‎07-22-2016 12:16 AM

Hi,

 

You can find that tool in the following link :-

http://forums.juniper.net/t5/SRX-Services-Gateway/PIX-ASA-to-Junos-converter/m-p/117878#M14776

 

However, this is not an official tool and is not supported by Juniper TAC. I am not sure about the success of the tool.

 

Regards,

Sahil Sharma

---------------------------------------------------

Please mark my solution as accepted if it helped, Kudos are appreciated as well.

 

 

Feedback