topic Re: Firepower Management Center in Network Security

Firepower Management Center

arturzegre — Wed, 25 Jan 2017 22:12:04 GMT

Hi Guys

I've doubt regarding FTD, I hope you can clarify me.

In platform Firepower v5.4, that can manage ASA 5500-X (FirePOWER Services only). I've a project that customer have around 30 Cisco ASA of 5505, 5510, and we're proposing a replacement, I'm considering 5506 using only Firewall services (ASA image).

My question is, FTD can manage this? Or I need to use Multidevice Cisco Security Manager .

If anyone can help me would be great .

Best Regards

Re: Firepower Management Center

syeda3 — Fri, 27 Jan 2017 18:05:10 GMT

Please see the below Cisco Firepower Compatibility Guide. It seems that you will be requiring Firepower 6.0.1, 6.1 or 6.2 to manage FTD on ASA 5506.

Cisco Firepower Compatibility Guide - Cisco

Cisco Firepower Threat Defense for the ASA 5506-X Series Using Firepower Management Center Quick Start Guide - Cisco

Cisco Firepower Threat Defense for the ASA 5506-X Series and Firepower Device Manager Quick Start Guide - Cisco

Hope to help.

Re: Firepower Management Center

leciscokid — Tue, 07 Feb 2017 03:17:20 GMT

If you're only managing security policy on the ASAs (Layer 4 type policy, five-tuple ACL and NAT , VPN) you're really better off with CDO.

http://www.cisco.com/c/dam/en/us/products/collateral/security/defense-orchestrator/at-a-glance-c45-736943.pdf

If you don't intend to run Firepower Services (Threat, AMP, URL)

Re: Firepower Management Center

jai.singla — Wed, 08 Feb 2017 00:24:26 GMT

I guess, Best thing can be done here if you dont have FMC hardware, install it on the VM, add the remote ASA ( have software based SFR modules). There you can add the licensing as per requirement i;e protection,control, AMP etc at FMC for each remote SFR

Re: Firepower Management Center

arturzegre — Wed, 08 Feb 2017 09:04:20 GMT

HI Guys

Thanks for the feedback.

I propose Cisco Defense Orchestrator for ASA5506, that was the better solution I found in this case, because the competion is proposing a FWaaS.

Thank you all.

Kind Regards