topic Re: Firepower 4100 >>> ASA mode (Multi context) in Network Security

Firepower 4100 >>> ASA mode (Multi context)

#TCN — Fri, 08 Apr 2022 11:35:51 GMT

Hello Cisco community

We have an ASA5585 running multiple context mode 9.12

Can we migrate to Firepower 4100 chassis running ASA mode running 9.16? (running muli-context on ASA while on Firepower chassis 4112)

Just checking we can copy the config in "like for like" - upcoming project 🙂

Thanks

#TCN

Re: Firepower 4100 >>> ASA mode (Multi context)

Rob Ingram — Fri, 08 Apr 2022 09:26:29 GMT

@#TCN you may possibly want to watch out for the physical interfaces, which may differ between the ASA and FPR hardware, so you may need to re-allocate the interfaces to each context. If you have any certificates, export and import those.

Re: Firepower 4100 >>> ASA mode (Multi context)

alexmurray1 — Fri, 08 Apr 2022 10:00:16 GMT

https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/multi-instance/multi-instance_solution.html

My understanding of the above document is that only FTD Containers are supported in Multi-Instance. You can't run Multi ASA instances. You would need to convert to FTD's. Only a single ASA could be deployed using the Native instance

"Multi-instance capability lets you run container instances that use a subset of resources of the security module/engine. Multi-instance capability is only supported for the Firepower Threat Defense; it is not supported for the ASA. "

"Container instance—A container instance uses a subset of resources of the security module/engine, so you can install multiple container instances. Multi-instance capability is only supported for the Firepower Threat Defense using FMC; it is not supported for the ASA or the FTD using FDM."

Re: Firepower 4100 >>> ASA mode (Multi context)

Rob Ingram — Fri, 08 Apr 2022 11:32:32 GMT

@alexmurray1 the original question was regarding multi-context not multi-instance, the ASA only supports multi-context.

Unless you are implying multi-context cannot be run on the FPR4100 when using ASA software image?

Re: Firepower 4100 >>> ASA mode (Multi context)

alexmurray1 — Fri, 08 Apr 2022 12:13:56 GMT

@Rob Ingram/@#TCN - Apologies I misread and thought multi-instance.