topic Re: FMC for ASA 5525-X with Firepower/Firepower IPS in Network Security

FMC for ASA 5525-X with Firepower/Firepower IPS

marine253 — Fri, 21 Feb 2020 16:21:12 GMT

Hello , I have been quoted the above ASA with firepower and Firepower IPS.

My question is , is FMC required to managed the ASA 5525-x firepower/IPS or can i do this via ASDM?

Will i be able to create firewall/IPS policies without FMC?

Thank you,

Re: FMC for ASA 5525-X with Firepower/Firepower IPS

Mohammed al Baqari — Mon, 15 Oct 2018 05:36:00 GMT

Yes you can manage firepower IPS using ADSM in terms of creating policies,
etc as long as it is running as service mode instead of FTD.

However, FMC provide more features than configuration such as correlation
policies, advanced monitoring and IOC, NMAP scans, etc.

For one device I suggest that you stick with ASDM as FMC will be overkill.

Re: FMC for ASA 5525-X with Firepower/Firepower IPS

marine253 — Mon, 15 Oct 2018 06:47:37 GMT

Hello,

What do you mean by service mode?

We want to use all the FTD features available as we purchased all the required FTD licenses etc..

Re: FMC for ASA 5525-X with Firepower/Firepower IPS

Mohammed al Baqari — Mon, 15 Oct 2018 06:53:00 GMT

In meant that you are going to run ASA as firewall and FirePower as service
module.

FTD is basically converting ASA with FirePower Service module to operate as
single unit.

Now which method to use (ASA+SM or FTD) is subject to your requirements,
mainly feature set. Not all features in ASA are supported in FTD yet.

Re: FMC for ASA 5525-X with Firepower/Firepower IPS

marine253 — Mon, 15 Oct 2018 06:59:03 GMT

Ah ok , thank you.

I am going to use ASA + SM. Then if i refer to your previous post , no need for FMC to manage the SM? ASDM should do it right?

Thank you,

Re: FMC for ASA 5525-X with Firepower/Firepower IPS

Mohammed al Baqari — Mon, 15 Oct 2018 07:38:00 GMT

Correct.