topic How to save config in asa5515-x firepower? in Network Security

How to save config in asa5515-x firepower?

TCAM — Tue, 12 Mar 2019 07:47:41 GMT

Hi - this may be a dumb question.

Ssh to firepower, is there a CLI command to save and backup current configuration?

In firesight dc750, i know i can use GUI to save and restore firesight config but couldn't find a way to save and backup config in firepower?

Can someone shed some lights please? Many thanks

Other than the bootstrapping

Marvin Rhoads — Wed, 25 May 2016 03:04:24 GMT

Other than the bootstrapping info (IP address, gateway FMC registration etc.), all of the FirePOWER module policies and events are stored on the FirePOWER Management Center.

As far as I know you cannot backup a FirePOWER module itself.

Hello Joe,

Jetsy Mathew — Wed, 25 May 2016 06:01:22 GMT

Hello Joe,

If you are managing the Firepower module with a Firesight Management Center , then you dont require the backup of the Firepower separately. The configurations on the Firepower is just applied via an access control policy reapply from the Firesight. Thus whenever you reimage or purchase new Firepower device, you have register the Firepower to the Firesight and just reapply the policy. With policy apply , all the desired configurations will get applied on the new Firepower.

Its must that you should take the Firesight backup to save the configurations. There is no need to take the backup of the Firepower separately.

Hope this answer helped you. Rate for the helpful posts.

Regards

Jetsy

Thanks Jetsy and Marvin for

TCAM — Wed, 25 May 2016 16:50:40 GMT

Thanks Jetsy and Marvin for your inputs and comments.

I am managing firepower from firesight. The problem I run into is that the "sftunnel" between firesight and firepower always goes down when the firepower in asa5515x is powered down for maintenance and I have to rebuild sftunnel manually to bring firepower online everytime.

I was hoping there is a way to use CLI to save off and backup firepower config, it looks like this feature is not available.

Thanks again.