girafskind/asa-ftd-parser

Python script to convert objects from ASA to standalone Firepower, FDM.

ASA-FTD-object-parser

Python script for parsing network objects and network object-groups from Cisco ASA to Cisco FDM

The script reads all network objects and object-groups from a Cisco Adaptive Security Appliance (ASA), and then parse the objects and groups to a Cisco Firepower Threat Defence, running the local Firepower Device Manager.

Pre-requisites

Python 3.9 Supported ASA version 9.x+ Supported FDM verison 7.x+

Installation

https://github.com/girafskind/ASA-FTD-parser.git
mkdir ASA-FTD-parser
python3 -m venv mkdir venv_ASA-FTD-parser
source venv_ASA-FTD-parser/bin/activate

Now can install the packages required to run this script.

pip install -r ASA-FTD-parser/requirements.txt

Configuration

Copy "config-template.py" to "config.py", enter IP-address, username and passwords for FDM and ASA and run main.py

asaip = "<IP-address of ASA>"
asausername = "<Username for HTTP access on ASA>"
asapassword = "<Passowrd for HTTP access on ASA>"
asaport = "<Port listening on the HTTP service>" (if omitted, it defaults to tcp/443)

ftdip = "<IP-address of FDM>"
ftdusername = "<Username for HTTP access on FDM>"
ftdpassword = "<Passowrd for HTTP access on FDM>"

Running

'main.py' does not take any arguments, simply run:

python main.py

The script does not deploy the new configration the FDM device, either done manually in the FDM WebUI, or call the "deploy_config_to_fdm" function with the FDM object as argument.

The script will print out its progess, how many found networks and groups on the ASA. How many objects migrated and how many skipped, as well as a list of the skipped objects.

The machine that executes this script will need to have API access to both the ASA and the FTD.

Regards girafskind