topic Restricting User Access to Specific Firepower Device and Policies in F in Network Security

Restricting User Access to Specific Firepower Device and Policies in F

e-imani — Tue, 21 Jan 2025 08:12:02 GMT

Hello dear engineers, I would appreciate your guidance. I have multiple Firepower devices in FMC, and I want one of the Firepower devices to be visible only to a specific user. In other words, when the user logs in to FMC, only the specific Firepower should be displayed to them, and they should not have access to the other Firepower devices. Is this possible?

Alternatively, after logging in, can the user only have access to the Access Control Policy of their specific Firepower and not the others? Is this possible or not?

I am using Cisco ISE and Radius to Authentication and Authorization

Re: Restricting User Access to Specific Firepower Device and Policies

MHM Cisco World — Tue, 21 Jan 2025 08:32:51 GMT

https://www.firewallninja.info/default-user-role-in-firepower/ <<- check this

MHM

Re: Restricting User Access to Specific Firepower Device and Policies

e-imani — Tue, 21 Jan 2025 10:30:06 GMT

I appreciate your response but i am looking for a way for having seprated accesses to firepowers in FMC I mean User X just have to has access to firepower number 1 in FMC not other firepowers

Re: Restricting User Access to Specific Firepower Device and Policies

Aref Alsouqi — Tue, 21 Jan 2025 09:53:07 GMT

I think the only way to achieve this would be via using the FMC domains. Please take a look at this link for more details:

Firepower Management Center Administration Guide, 7.1 - Domains [Cisco Secure Firewall Management Center] - Cisco

Re: Restricting User Access to Specific Firepower Device and Policies

MHM Cisco World — Tue, 21 Jan 2025 10:21:28 GMT

I will send you PM today

MHM

Re: Restricting User Access to Specific Firepower Device and Policies

腾龙游戏网站【 tl10475.com 】 — Tue, 21 Jan 2025 10:40:39 GMT

that is Ok

Re: Restricting User Access to Specific Firepower Device and Policies

Rob Ingram — Tue, 21 Jan 2025 10:50:19 GMT

@e-imani wrote:

I appreciate your response but i am looking for a way for having seprated accesses to firepowers in FMC I mean User X just have to has access to firepower number 1 in FMC not other firepowers

@e-imani as @Aref Alsouqi has said, you can use domains on the FMC - "The FMC allows you to implement multitenancy using domains. Domains segment user access to managed devices, configurations, and events." < as per the link already provided.

Re: Restricting User Access to Specific Firepower Device and Policies

MHM Cisco World — Tue, 21 Jan 2025 12:23:33 GMT

If fmc domain not work please mention me to discuss the solution

MHM

Re: Restricting User Access to Specific Firepower Device and Policies

腾龙游戏网站【 tl10475.com 】 — Thu, 23 Jan 2025 09:56:42 GMT

good question

Re: Restricting User Access to Specific Firepower Device and Policies

腾龙游戏网站【 tl10475.com 】 — Sat, 22 Feb 2025 13:47:35 GMT

YOu Did