topic Re: ASA 5508-FTD (FMC License) in Network Security

ASA 5508-FTD (FMC License)

zaidalawneh4331 — Thu, 16 Jul 2020 09:03:10 GMT

I have a simple issue.

our customer has ASA 5508-FTD version 6.2.3.5 and they want to order an FMC license, which will be deployed on the cloud.

So I want an appropriate FMC license, which must be compatible with FTD version 6.2.3.5.

Re: ASA 5508-FTD (FMC License)

Rob Ingram — Thu, 16 Jul 2020 09:24:46 GMT

Hi,
FMC is on premise central management for FTD not cloud. If you wish to manage the FTD from the cloud then you would use Cisco Defence Orchestrator (CDO).

How many devices does your customer have? If they only had a couple of FTD devices then it probably would not be worthwhile using FMC, CDO would be much more cost efficient. CDO does require FTD version 6.4 or newer, so it does not support your current version 6.2.3.5. Also CDO does not necessarily support all the features that the FMC does, determine your customers requirements.

If you do wish to use FMC, then refer to the FMC datasheet to determine which model best suits your environment. Pay attention to the maximum number of sensors (FTD devices) that each model will support.

https://www.cisco.com/c/en/us/products/security/firepower-management-center/index.html#~stickynav=1

HTH

Re: ASA 5508-FTD (FMC License)

Marius Gunnerud — Thu, 16 Jul 2020 10:51:53 GMT

FMCv is infact supported in AWS and Azure Clouds, along with VMware also. You need to purchase a Firepower Management Center Virtual License which will determine how many devices you can manage from the FMC. Other than that you will need to purchase licenses for the functions you want to use with your FMC (IPS, URL, AMP).

The CDO deployment is a good tool, but it uses the FDM to perform configuration changes, and FDM doesn't have the full capability of FMC so there might be some configuration you will not be able to do through CDO depending on your deployment ofcourse.

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fmcv/fpmc-virtual/fpmc-virtual-intro.html

Re: ASA 5508-FTD (FMC License)

zaidalawneh4331 — Thu, 16 Jul 2020 10:56:36 GMT

Thanks for your information.
They have one device and they need FMC because they want to Configure PPPOE on outside port.
what version that can support PPPOE?

Re: ASA 5508-FTD (FMC License)

zaidalawneh4331 — Thu, 16 Jul 2020 11:04:52 GMT

Thanks for your information.
They have one device and they need FMC because they want to Configure PPPOE on outside port.
what version that can support PPPOE?

Re: ASA 5508-FTD (FMC License)

zaidalawneh4331 — Thu, 16 Jul 2020 11:12:06 GMT

Thanks for your information.

I only want to use FMC to configure PPPOE

FTD 6.2.3.5 doesn't support PPPoE.