General limitations

FortiConverter is a migration tool, not a migration service. It’s designed to be used as part of a properly planned migration process.

Supported FortiOS conversions

FortiConverter supports conversions from other vendors to FortiOS 6.2, 6.4, 7.0 and 7.2.

Creating final configurations

While FortiConverter significantly shortens the conversion process, a final, useable configuration requires you to review and audit the FortiConverter output conversion. The FortiConverter tuning capability can help with the review and audit process.

While you can use the FortiConverter tuning capability to review and fix errors in the conversion, it isn't designed to perform significant reconfiguration.

Incomplete routing information

In some cases, not all routing information that FortiConverter requires to make a decision about a policy interface is available. In these cases, it uses the any interface.

IPsec support

FortiConverter converts IPsec configurations to route-based or policy-based IPsec depending on which one the source configuration is closest to. Users can enable Route-based IPSec for Cisco ASA, PIX,FWSM, Juniper and Check Point conversions.