topic Hi OlegLook at the Discovery in Network Security

FS-VMW-2-SW-K9 Specifications

BenBen — Sun, 10 Mar 2019 13:18:10 GMT

Hi,

Anybody knows what CPU, Storage, RAM specifications required for vm to install FireSight Management Center FS-VMW-2-SW-K9?

Thanks.

4 vCPU, 250 GB and 4 GB.Those

Marvin Rhoads — Mon, 05 Jan 2015 18:05:59 GMT

4 vCPU, 250 GB and 4 GB.

Those are the default values specified by the ova and Cisco recommends you not adjust those downward at all.

EDIT 2014-01-05 - see below posting for source

The reference is incorrect

rdboyd — Mon, 05 Jan 2015 18:06:00 GMT

The reference is incorrect Marvin. Can you recheck your source. I have the same question and need a source.

I also need the sizing requirements and recommendations for the OVA.

Sorry - that was the general

Marvin Rhoads — Mon, 05 Jan 2015 18:31:43 GMT

Sorry - that was the general Defense Center installation guide. The virtual appliance specific one is here:

http://www.cisco.com/c/dam/en/us/td/docs/security/firesight/531/PDFs/FireSIGHT-System-Virtual-Installation-Guide-Version-5-3-1.pdf

The table I refer to is as follows:

Hello, Anybody know

Oleg Tsoy — Thu, 29 Jan 2015 11:05:13 GMT

Hello,

Anybody know perfomance values for FS-VMW-2-SW-K9:

Maximum number of IPS events

Maximum network map (hosts/users)

Maximum flow rate (flows per second)

I understand that it's depend on server resources.

But Is there any license limit?

There is no license-imposed

Marvin Rhoads — Thu, 29 Jan 2015 13:53:51 GMT

There is no license-imposed limit for those values.

When i activated the license

Oleg Tsoy — Mon, 02 Feb 2015 07:17:06 GMT

When i activated the license for FS-VMW-2-SW-K9 i got 50 000 (host,users). What if the number of users exceed that value?

That's why i thought that there are other perfomance limit values for FS-VMW-2-SW-K9.

Same issue here. I got the FS

rretanag099 — Mon, 13 Jul 2015 17:31:34 GMT

Same issue here. I got the FS-VMW-10-SW-K9, with 50000 host/user limit, today i have a health warning indicating that these value exceeds the limit.

Hi OlegLook at the Discovery

pazzi — Mon, 13 Jul 2015 18:15:30 GMT

Hi Oleg

Look at the Discovery policy. By default, Firesight is creating host profiles of every IP address that it sees in connection event. Modify the discovery policies default rule of 0.0.0.0/0 to that of your protected network.

To answer your question, you decide what happens when the max limit of Firesight hosts is exceeded in the Advanced tab of your Discovery policy.

Paul

Hi rretanagModify your

pazzi — Mon, 13 Jul 2015 18:18:47 GMT

Hi rretanag

Modify your Discovery policy and change the default 0.0.0.0/0 rule to that of your protected networks IP address ranges.

By default, Firesight will store all IP addresses and create Host profiles. You can delete the IP addresses from Host profiles that are outside of your protect networks or they will time out after 7 days by default.

Paul

Thanks pazzi, it works!

rretanag099 — Mon, 13 Jul 2015 22:08:08 GMT

Thanks pazzi, it works!

Excellent, glad to hear that

pazzi — Mon, 13 Jul 2015 22:27:24 GMT

Excellent, glad to hear that!

Paul

Is the FS-VMW-2-SW-K9 , the

D. STM — Wed, 09 Mar 2016 17:12:32 GMT

Is the FS-VMW-2-SW-K9 , the smallest firesight you can buy? I would only be using it on one ASA 5506 to get the added benefit of firesight. Good Idea bad idea? From what I read there are other options in the FireSight side.

Also is that cost associated with buying FS-VMW-2-SW-K9 a subscription by year, or not. I know its not required for the 5506, but they show it as recommend for best performance.

Running it with the free ESXi, it would be worth it for a couple hundred I would think. Opinion?

The ASA 5506 FirePOWER

Marvin Rhoads — Wed, 09 Mar 2016 18:20:21 GMT

The ASA 5506 FirePOWER features can be managed using ASDM. 90+ % of the FirePOWER Management Center (new name for FireSIGHT Management Center as of release 6.0) functions are available using the local (ASDM-based) management.

If you want to go an actual management center then, yes, the FS-VMW-2-SW-K9 is the entry level license.

The management center license is perpetual (no term length) but most customers also buy it with Smartnet support. The Smartnet support contract does have a term and can be renewed or extended as needed.

Thanks Again Marvin! Good

D. STM — Wed, 09 Mar 2016 21:40:37 GMT

Thanks Again Marvin! Good stuff, I need to get my hands in the system more to get use to everything so I don't feel so out of place on this new stuff.

Thank You Again.

Hi, all...Ive purchased the

philb0001 — Fri, 22 Apr 2016 11:28:15 GMT

Hi, all...Ive purchased the FS-VMW-10-SW-K2 license,and installed to VM Defense Ctr

but Defense Center is asking me for an other license to apply ACCESS CONTROL policy to the sensor.(which i do not have, --seems its protection feature)

Im not able to get any data on just about any dashboard, cant even apply network discovery policy. (sensor is registered and i could apply system policy)

Can i get a demo license for the " protection" feature which is what i seem to be missing..? who can i contact?

My first SF install and quite lost at this point

@philb0001 ,

Marvin Rhoads — Fri, 22 Apr 2016 12:29:06 GMT

philb0001 ,

Theres a no-cost Control (also known as Protect + Control) license that's included with all ASAs with FirePOWER services. It's generally shipped as a paper PAK with the appliance. If you didn't receive it, your reseller can provide it - its number is found in the Cisco ordering tool (CCW) as a 'serial number' associated with the order. If they can't figure that out, you can open a TAC case and the licensing team can assist.

Once you redeem and apply that license, your policies should work.

For all the licensing issues

Jetsy Mathew — Sat, 23 Apr 2016 10:52:16 GMT

For all the licensing issues and requests , its always better to contact the Cisco Global Licensing team.

Marvin - so if I ordered the

Security Conscious — Wed, 15 Jun 2016 13:27:17 GMT

Marvin - so if I ordered the FS-VMW-2-SW-K9 originally to manage my 2 ASA's, but then later I add 3 more ASA's w/Firewpower that I want to manage (total 5 now), what should I be ordering? Do I order 2 more of that same part number (bringing my total purchased mgt solutions to 6) so that I'm legal? It looks to me like there's nothing in my FireSight manager that is going to enforce a 2 node limit...or for me to even put in the additional 2 licenses I'm suggesting I order above. It's pretty confusing.

All,

tato386 — Thu, 23 Feb 2017 16:49:30 GMT

All,

I have the FireSight 6.2 VM installed on a dedicated VMware server and I have assigned 4vCPU and 8GB of RAM to it. The physical CPUs are Xeon 2.3GHz, network is 1GB and the drives are SAS. I have not yet added any appliances to it and just browsing around the GUI seems slow. I plan to attach 10-15 appliances to it and its current performance is concerning. Is this normal?

Thanks,

Diego