asa-L2L config migration

[chielazo_amcn]

Hello Folks,

I'm new to using Expedition Migration Tool and have a question regarding l2l or AnyConnect configuration from my cisco asa firewall. Does Expedition automatically identify and migrate the config of asa l2l or Anyconnect? Trying to play around with it but seems like it's a manual configuration process? Can somebody please confirm this. Thank you.

Please note: I'm trying to migrationg a cisco asa post 8.2 code using the latest Expedition migration tool.

Thank you.

Chie

[lychiang]

Hello Chie , 

Not anyconnect configuration, only IPsec site-to-site vpn tunnels configurations. 

[chielazo_amcn]

Hi Lychiang,

Thanks for your reply. So if I have Anyconnect vpn configuration on the asa I have to manually configure it on the palo firewall right? Also for l2l vpn configuration, does it also migrate the PSK?

Thanks again.

Chie 

[lychiang]

Chie,

PSK is encrypted , won't be able to migrated automatically . Palo Alto networks use Global Protect as VPN client , migrate from anyconnect to global protect will need to be done manually.