topic Re: Firepower next generation firewall in Network Security

Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 14:54:28 GMT

Hello All,

I am just doing some labs trying to build some FTD-NG standard firewall and managed through the browser it self not through the FMC.

however when try https://10.1.1.1 it won't work, it times out.

Note i can ping the FTD from my pc and from FTD to PC.

this lab been built in EVE NG.

Will this issues be caused by the licenses?

any help or suggestion I appreciated.

please see the screen shot of the CLI.

Also the i can access it through the putty as well.

many thank you.

Star

Re: Firepower next generation firewall

Rob Ingram — Mon, 09 Jan 2023 15:10:36 GMT

@SS2020 from the CLI run "show managers" does it confirm "Managed locally"?

Re: Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 15:24:31 GMT

Hello Rob,

There is no managers configured.

Re: Firepower next generation firewall

Rob Ingram — Mon, 09 Jan 2023 15:29:30 GMT

@SS2020 ok, so the FTD is not configured for local management. From the CLI run "configure manager local"

To answer your other question, it should not be a licensing problem as at a minimum you'd have a base license.

Re: Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 15:49:55 GMT

Hello Rob,

I have tried few times this command is not working,

I tried to user

configure manger local

configure manger local cisco

configure manger add local

none of them working but when i try to add it to the FMC with configure manager add 10.1.1.10 cisco it's working fin.

Not sure what i am missing.

Re: Firepower next generation firewall

Rob Ingram — Mon, 09 Jan 2023 15:52:09 GMT

@SS2020 try "configure manager delete" then "configure manager local"

I assume this device is new and not been configured, as you will lose the configuration.

Re: Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 15:57:41 GMT

Hello Rob,

yes the device is new.

this commands are still not working.

Re: Firepower next generation firewall

Rob Ingram — Mon, 09 Jan 2023 16:00:36 GMT

@SS2020 what image and version are you using in EVENG?

Type ? and what commands are available?

Re: Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 16:21:55 GMT

I'm using EVENG community and see below.

Re: Firepower next generation firewall

Rob Ingram — Mon, 09 Jan 2023 16:25:03 GMT

@SS2020 I was referring to the FTD image you are using in EVENG?

What commands are available from the FTD CLI?

Re: Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 16:31:29 GMT

Hello Rob,

Re: Firepower next generation firewall

Rob Ingram — Mon, 09 Jan 2023 16:32:56 GMT

@SS2020 that's NOT the FTD image, it's the NGIPS image - so you cannot manage the NGIPS image locally, you need to manage using the FMC.

You need to get the FTD image which you can manage locally.

Re: Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 16:37:05 GMT

OW sorry Rob, my bad, sorry for confusing you. I didn't know that.

I have powered up the FTD and i will let you know how it goes.

Many Many thank you for your time and help.

Re: Firepower next generation firewall

SS2020 — Mon, 09 Jan 2023 17:14:56 GMT

Hello Rob,

you were right now the ftd is working through the https but now i get a different error.

Re: Firepower next generation firewall

Rob Ingram — Mon, 09 Jan 2023 17:42:11 GMT

@SS2020 perhaps the services haven't started yet, try again after a while.

Re: Firepower next generation firewall

nyeinchanzaw005 — Mon, 02 Oct 2023 15:21:54 GMT

Hi Star,

How you fix this issue? Now i m setup firepower FTD at EVE-NG and i can access from putty and ping from my outside network of EVE. But i cannot access via https. Then when i typed "configure manager local" it's showing "This device does not support local management.

Cisco Firepower Threat Defense for KVM (75) Version 6.2.0 (Build 363)