topic Secure FMC managed device access in Network Security

Secure FMC managed device access

Praveen Kumar — Fri, 21 Feb 2020 17:48:34 GMT

How can I implement an ACL for the managed device IP of ASA 5525s with Firepower? I have deployed a pair of "ASA 5525 with Firepower" in Active/Standby mode. These devices are managed via FMC. The FMC uses these managed device IP to connect to FTD and we are able to SSH to the same IP. I need to secure management 0/0, so only certain IPs can access it.

Thanks in Advance!

Re: Secure FMC managed device access

Rob Ingram — Thu, 02 Jan 2020 21:42:32 GMT

Hi,

You can configure the FTD to restrict access to ssh/http via Platform Settings configuration in the FMC, just create a new policy if you don't already have one and assign to the FTD(s). Reference guide here.

HTH

Re: Secure FMC managed device access

Marvin Rhoads — Fri, 03 Jan 2020 03:10:45 GMT

Not that when we use the "Platform Settings" there are separate policies / settings for FTD devices and Firepower service modules. That's because each has different capabilities in this regard.

For a Firepower service module, the appropriate place to control access is under "Access List" within the platform settings.

For an FTD device, it is done under "Secure Shell".