topic Re: Configure SSH Access to FTD Inside Interface in Network Security

Configure SSH Access to FTD Inside Interface

LuigiDiFronzo9542 — Tue, 23 May 2023 19:01:50 GMT

We have a FMC 7.01 and we'd like to configure a new interface of the FTD, in this case the inside interface, so we can have ssh access for Management. How coud we enable this option through FMC? We have to configure this in the Platform Settings?

Thanks.

Re: Configure SSH Access to FTD Inside Interface

MHM Cisco World — Tue, 23 May 2023 19:02:49 GMT

What platform you have ?

Re: Configure SSH Access to FTD Inside Interface

LuigiDiFronzo9542 — Tue, 23 May 2023 19:05:38 GMT

We have FMC1600 ver 7.0.1 and the devices are FP2110 ver 7.0.1 as well.

Re: Configure SSH Access to FTD Inside Interface

MHM Cisco World — Tue, 23 May 2023 19:07:47 GMT

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200701-Configuration-of-Management-access-to-FT.html

Re: Configure SSH Access to FTD Inside Interface

Rob Ingram — Tue, 23 May 2023 19:08:30 GMT

@LuigiDiFronzo9542 yes its the Platform Settings policy that controls SSH access to the managed FTDs. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/interfaces-settings-platform.html#task_42B3A06C70E8415E8C024AE76FE79774

Re: Configure SSH Access to FTD Inside Interface

LuigiDiFronzo9542 — Tue, 23 May 2023 19:11:10 GMT

Thanks for the reply,

I've seen that link, but I'm courious if that apply for the FMC 7.0.1 version and I'd like to know if the external authentication is required? I mean, if possible to access using local user at the moment?

Thanks

Re: Configure SSH Access to FTD Inside Interface

Rob Ingram — Tue, 23 May 2023 19:13:15 GMT

@LuigiDiFronzo9542 no external authentication is not required, you can use local authentication. FYI, if it was required the documents would state that.

Re: Configure SSH Access to FTD Inside Interface

MHM Cisco World — Tue, 23 May 2023 19:20:17 GMT

Note: On FTD devices that run software version 6.0.1, the CLI cannot be accessed by a local user, an external authentication must be configured in order to authenticate the users. However, on FTD devices that run software version 6.1.0, the CLI is accessed by the local admin user while an external authentication is required for all other users.

Re: Configure SSH Access to FTD Inside Interface

LuigiDiFronzo9542 — Tue, 23 May 2023 20:51:49 GMT

Thank you for all your replies.