topic Re: Is there something better than ASDM to manage FirePOWER services? in Network Security

Is there something better than ASDM to manage FirePOWER services?

pmcamilleri — Fri, 21 Feb 2020 16:42:51 GMT

Hi all

I currently use ASDM ver 7.8(2) to manage our ASA FirePOWER services. I tend to find it antiquated and limited. Is there a better software application I could use and if yes would I need to purchase it?

Thanks

Re: Is there something better than ASDM to manage FirePOWER services?

Sheraz.Salim — Tue, 29 Jan 2019 11:52:15 GMT

if you have vm resource than you can install a vFMC once install you can add the sfr in your ASA to vFMC. depends what software support you have with cisco. if you have a support contract you can download the image from cisco software website.

Re: Is there something better than ASDM to manage FirePOWER services?

pmcamilleri — Tue, 29 Jan 2019 12:44:21 GMT

How about FirePOWER Device Manager? I've read that this is replacement of ASDM. Looking at a few screenshots it looks more user friendly, modern and I suspect more features. Would we need to buy this or do we qualify for an upgrade?

Re: Is there something better than ASDM to manage FirePOWER services?

Sheraz.Salim — Tue, 29 Jan 2019 13:05:25 GMT

FirePOWER Device Manager you have to convert your ASA box into FTD for this you need a smart account. FTD does not work with traditional lic where as SFR in ASA does.

it depends what you want if you good in firepower side than go for FTD but if you new in Firewall side in regards to firepower than stick with SFR once you understand the software then make your move.

Re: Is there something better than ASDM to manage FirePOWER services?

pmcamilleri — Tue, 29 Jan 2019 13:07:57 GMT

So in our case this would not apply since we are running ASA Firepower on our Cisco 5512-X and this is being managed by ASDM which sucks.

Re: Is there something better than ASDM to manage FirePOWER services?

Sheraz.Salim — Tue, 29 Jan 2019 13:09:11 GMT

you can install the vFMC and add the SFR module in to FMC.

Re: Is there something better than ASDM to manage FirePOWER services?

Marius Gunnerud — Tue, 29 Jan 2019 15:11:40 GMT

Not to mention the FDM is limited in the available configuration features. If you have the budget for it FMC is the way to go.

Re: Is there something better than ASDM to manage FirePOWER services?

pmcamilleri — Tue, 29 Jan 2019 15:14:57 GMT

Unfortunately we do not have the budget for FMC. The Firepower upgrade was already expensive.

Re: Is there something better than ASDM to manage FirePOWER services?

Sheraz.Salim — Tue, 29 Jan 2019 15:17:49 GMT

sorry to hear that. in that case you only can fine tune the ASDM firepower tab and create your network policies. however it was some limitation in ASDM with firepower. for example the network discovery is not available in ASDM firepower. however this functionality can be achieved with FMC adding the SFR in it.

please do not forget to rate.