ASA → OPNsense migration log 2025-07-28 Quick notes on NAT parity, object migration, and WireGuard split-tunnel ACLs.