Case Study: New York City healthcare organization achieves rapid, optimized Cisco ASA-to-Firepower migration with Tufin SecureMigrate

A Healthcare Organization’s Migration From Cisco ASA to Firepower

The Healthcare Organization, a large New York City provider protecting sensitive patient data, needed to upgrade from Cisco ASA to Cisco Firepower next‑generation firewalls to improve threat intelligence and visibility. With limited in‑house migration experience, they engaged their consulting partner and selected Tufin’s SecureMigrate: ASA to Firepower (with SecureTrack/policy browser support) to ensure the migration delivered full feature realization and policy integrity.

Tufin automated the migration and policy optimization, enabling the team to remove unused rules and object groups, align network object groups to IPS profiles, and generate full compliance reporting. The vendor’s SecureMigrate tool helped migrate seven firewalls in under two weeks (one firewall with ~1,200 rules in under 10 hours and one with 130,000 rules in 25 hours), an effort the team estimates was roughly three times faster than manual approaches, improving policy health, compliance visibility, and client trust while opening new migration engagements.