Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
jharper
New Contributor

Any way to convert only parts of a config?

Just curious if there's a way to convert only sections of a config, then just copy and paste them into the FortiGate (from a Cisco ASA).  I really only want objects and rules, but there's way too many for me to manually do it (20K+).  

I was going to examine the python code to see if I might be able to get it to work, but was curious if anyone has done it before.

 

Thanks,

 

Jeff

1 REPLY 1
emnoc
Esteemed Contributor III

I think you might want to  parse the object/group out on the ciso ASA and then forticonvert just those objects

 

e.g

show run object id <name_xyz>

show run object-group id <group_xyz>

 

or just convert the whole cfg and grab the relate fortios config  after loading it into a fortigate

 

eg ( let's say you want just address )

 

ssh admin@fgta..b.c.d "show firewall address " > file.address

 

Another solution that I've used on cisco ASA and even other firewalls, is just to  enable restAPI and ask for example all of the network-objects, once you have those you can convort these into fortios lingo.

 

e.g

 

curl -v -k https://<asa-ipv4-addr...objects/blahblah 

 

You might want to review the docUI for the cisco api agent.

 

Ken Felix

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors