topic Re: Firepower without subscription in Network Security

Firepower without subscription

S891 — Fri, 21 Feb 2020 15:42:01 GMT

hi,

I want to ask what features are available in FTD if I purchase it without any subscription (AMP, IPS, URL filtering etc.). FTD configuration options seems overwhelming and it is difficult to figure out for a newbie to know what can and what can't be done with only the base firewall.

Thanks

Re: Firepower without subscription

Francesco Molino — Thu, 03 May 2018 02:52:05 GMT

Hi

Without any subscriptions you'll be able to configure rules like you do on asa but with a different gui.

FTD is the next gen firewall unified image and without subscriptions you can't do too much. And if you don't have any FMC, then don't go to FTD, take s new generation box and image it with asa.

Re: Firepower without subscription

mikael.lahtela — Thu, 03 May 2018 07:01:23 GMT

Hi,

As mentioned, L4.

Base Licenses The Base license allows you to:

• implement user and application control by adding user and application conditions to access control rules

• configure your Firepower Threat Defense devices to perform switching and routing (including DHCP relay and NAT)

• configure Firepower Threat Defense devices as a high availability pair

• configure security modules as a cluster within a Firepower 9300 chassis (intra-chassis clustering)

• configure Firepower 9300 or Firepower 4100 series devices running Firepower Threat Defense as a cluster (inter-chassis clustering) Your purchase of a Firepower Threat Defense device or Firepower Threat Defense Virtual automatically includes a Base license.

https://www.cisco.com/c/en/us/td/docs/security/firepower/601/configuration/guide/fpmc-config-guide-v601/Licensing_the_Firepower_System.pdf

br, Micke

Re: Firepower without subscription

S891 — Thu, 03 May 2018 14:12:28 GMT

Thank you for your responses. What is the extent of application and user control? Can I do, for example, social media restriction, bit-torrent restriction etc?

I think for user restriction I will have to do AD integration. How would I get the updated information on application f I don't have a subscription?