topic Re: FTD virtual appliance in AWS in Network Security

FTD virtual appliance in AWS

sweigle88 — Tue, 21 Dec 2021 23:29:17 GMT

Hi,

We would like to perform various testing on the Cisco Firepower and therefore we would like to stand up a Firepower in AWS. I've created a cloudformation template and subscribed to the firepower aws subscription. I created 4 network interfaces and they are attached to the instance as described in the deployment documents published by cisco for their aws appliance, but it appears to only have one interface in the config that it is using:

> show ip

System IP Addresses:

Interface Name IP address Subnet mask Method

TenGigabitEthernet0/0 outside 100.64.37.81 255.255.255.128 DHCP

TenGigabitEthernet0/1 inside 192.168.45.1 255.255.255.0 manual

The management interface is not set.

Is there a way to configure this virutal appliance via the command line? It has been a while for me, but I'm used to IOS and configuring via the command line, but all I see is that you need to use a GUI for these firewalls?

thanks

Re: FTD virtual appliance in AWS

Marvin Rhoads — Wed, 22 Dec 2021 03:36:36 GMT

"show network" will show the management interface details.

Firepower requires using a GUI (API is available for some things). It is usually FMC (a separate centralized server) when running multiple FTD devices but you can also use the local GUI known as Firepower Device Manager. There's also a cloud-based option - CDO.

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/aws/ftdv-aws-gsg/ftdv-aws-fdm.html

Re: FTD virtual appliance in AWS

sweigle88 — Wed, 22 Dec 2021 05:15:52 GMT

Thanks Marvin. I did see that you can configure these firewalls through Ansible. Through User Data, it sure would be nice to place an initial config on it. It just would be nice to not have to worry about another machine or how to securely connect to the firewall for initial configuration.

Re: FTD virtual appliance in AWS

Marvin Rhoads — Wed, 22 Dec 2021 07:11:48 GMT

I've not done it myself but you can automate FTD deployment using Terraform and the like.

Have a look at this YouTube series:

https://www.youtube.com/watch?v=TvcuXP3Yn-0