topic Re: New FPR devices in an ASA 5500x environment in Network Security

New FPR devices in an ASA 5500x environment

Lee Dress — Fri, 21 Feb 2020 17:49:13 GMT

we have an ASA 5500x environment like this.

Main site 5516x

remote sites 5508 and 5506x

we are using a Firepower Service VM to manage all the firepower services on the devices.

we are not in FTD mode.

since the 5506x w/firepower is now EOL, is it possible to integrate the new FPR devices (like FPR 1010) into our environment, or am I going to have to build out a whole new system?

Re: New FPR devices in an ASA 5500x environment

Marvin Rhoads — Wed, 08 Jan 2020 14:19:07 GMT

Well your FMC doesn't manage anything about the ASA 5508 and 5506-X appliances' ASA configuration - only their Firepower service modules.

So if and when you add new devices running FTD you'd have to build out an Access Control Policy (or policies) that combine what you formerly did with the ASA configuration(s) along with what you want from the Firepower side. You can still manage them from the existing FMC (assuming you have the licensing allowing you to do so).