topic Re: FP CLI in Network Security

FP CLI

fatalXerror — Tue, 12 Mar 2019 13:50:49 GMT

Hi,

Is it possible to configure changes in the ASA CLI of the ASA-FTD?

Thanks

Re: FP CLI

Rodrigo Gurriti — Wed, 25 Jul 2018 15:17:45 GMT

Hi,

On the FTD you can change some system settings (management ip, dns etc), but on the LINA (ASA) you can do only troubleshooting commands (show, debug, packet-tracer etc.

Re: FP CLI

aaron.hackney — Wed, 25 Jul 2018 16:03:42 GMT

To add to Rodrigo's comment, there are some settings that are not in the GUI but you can push ASA style commands to LINA using FlexConfig. Here is a sample use case: https://hacksbrain.com/2018/07/24/firepower-flexconfig-a-practical-example/

Re: FP CLI

fatalXerror — Wed, 25 Jul 2018 16:11:16 GMT

Hi aaron,

but what if I don't use flex-config just configure what i need straight ahead in the CLI, is that possible?

thanks

Re: FP CLI

aaron.hackney — Wed, 25 Jul 2018 16:54:35 GMT

Hello,

If you are running ASA code, then the ASA CLI is available. If you are running Firepower Threat Defense (FTD) Nextgen Firewall, then, no you cannot make changes on the CLI save a few things to make the box remote manageable. You must either use FDM, FMC, or APIs provided by FDM or FMC.

There is no "conf t".

-A