Conduit to ACL conversion

[bugskumar]

Has anyone done the conduit to ACL conversion in the production environment?

Did you use the Cisco tool for it?

Kindly share your experiences with me as I'm in the process of this conversion and want to be aware of all hurdles/issues that I might come across.

Thanks.

 

[NetworkGhost]

I would do it manually, its a good time for a security review to determine what really needs to be there and will also ensure everything will be working properly when it comes back up.

 

[KiscoKid]

I presume the tool you are referring to is the occ.exe available on the CCO. I used this ages ago and it works very well actually.

As I recall it loves creating object groups where it can but fundamentally there's nothing wrong with that.

I think you need to be a registered user to download it so if you prefer to use it, I don't mind emailing it to you if you don't have the necessary access.