topic Re: Firepower device management options in Network Security

Firepower device management options

RANT — Thu, 04 Aug 2022 18:26:52 GMT

I'm going to be transitioning from ASAs to Firepower devices. Is it better to manage a small number of devices locally, or to utilize FMC (which obviously has a sizeable $$ commitment)?

Re: Firepower device management options

IP_Cartel — Thu, 04 Aug 2022 18:43:20 GMT

FMC is good for growth. It's a simple OVA file you get and load on VMware. Think of it like Cisco Prime. A central point of mgmt.

Re: Firepower device management options

Rob Ingram — Thu, 04 Aug 2022 18:47:28 GMT

@RANT you've got 3 options: FMC, FDM (local) or CDO (cloud). Ideally you'd use the FMC to manage the firewall, as it supports more features than if using FDM or CDO. It depends on exactly what features you require from the solution.

Re: Firepower device management options

RANT — Thu, 04 Aug 2022 20:04:04 GMT

I guess my question is, what does the central management option do for me that FDM/CDO doesn't?

Re: Firepower device management options

Marvin Rhoads — Fri, 05 Aug 2022 08:02:49 GMT

For anything other than the most basic features FMC will serve you better. You get a single place to manage the devices from, consolidated and historical reporting, management of a single set of objects, access to many more advanced settings etc.

You also now (as of July 2022) have the option of cloud-delivered FMC (cdFMC) built into CDO.

The few customers I have who went with FDM only are unhappy with their decision. One even switched to FMC later at considerable effort.