topic Re: FP2210 ASA mode connect to FMC in Network Security

FP2210 ASA mode connect to FMC

dkleimbach — Tue, 22 Sep 2020 14:16:04 GMT

I have a client with a FP2110 that was ordered with ASA mode. They also ordered FMC and were intending to configure Firepower services on the FP2110 with ASA similar to how it would have been with an old ASA running FP services. I can't figure out or find instructions on how to configure the FP2110 to point to the FMC when it's running in ASA mode. All I can find is how to do this in FTD mode.

Any help would be appreciated.

Thanks,

Deanna

Re: FP2210 ASA mode connect to FMC

Rob Ingram — Tue, 22 Sep 2020 14:30:12 GMT

Hi @dkleimbach

ASA with Firepower Services is not supported on FPR2100 hardware.

You can either run ASA (without FP) or FTD software. If you have purchased an FTD I suggest you re-image the hardware to FTD.

Re-image guide

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html

HTH

Re: FP2210 ASA mode connect to FMC

dkleimbach — Tue, 22 Sep 2020 16:07:05 GMT

That's what I was afraid of. Is there a migration option so we don't lose all of the ASA config? I'm also wondering if there is anything we need to do differently with licensing. Since it was purchased as FPR2110-ASA-K9 does something need to be changed licensing for it to run with the FTD image instead of the ASA image

Re: FP2210 ASA mode connect to FMC

Marvin Rhoads — Tue, 22 Sep 2020 17:16:43 GMT

You can download and run the free Firepower Migration Tool to convert from an ASA conifg to and FMC-managed FTD config.

It will require FTD licenses. Threat at a minimum and optionally URL Filtering and AMP (Malware).