topic FirePower Flex Config in Network Security

FirePower Flex Config

brandon.m.strode1 — Sat, 22 Feb 2020 07:35:23 GMT

My company is moving overhauling their entire network. A part of this is that we are going from static routing to dynamic routing and moving from a ASA to a FirePower 2110 device. The original design implementation for the dynamic routing was to use EIGRP. The consultant helping to configure the FirePower explained that EIGRP was not compatible with the FMC and that now there is discussion to changing from that to OSPF. After a bit of research I found that you can use the flex config option to use features that are available in the ASA in the FirePower environment. My question is do you lose any functionality on the FirePower by implementing the flex config? If we lose any of the functionality by implementing the flex config then it defeats the purpose which is why I am asking. From what I have read that does not seem to be the case but I wanted to reach out and ask around. Thanks for any help provided in advance.

Re: FirePower Flex Config

Mohammed al Baqari — Mon, 12 Mar 2018 17:08:50 GMT

Nope you don't lose functionally. EIGRP is coming to FP soon. FlexConfig is
used to accelerate the process of implementing FP. It will take cisco
sometime to migrate ASA features to FP.

FlexConfig alone shouldn't be your reason for migrating from EIGRP to OSPF
unless you have other design reasons. I have implemented it and its working
fine.

Same concept if you want to configure DNS servers in FP. At this point of
time you should use FlexConfig to implement. Its not configurable from FMC.
There are many other features.

Re: FirePower Flex Config

brandon.m.strode1 — Fri, 16 Mar 2018 18:08:50 GMT

Thanks for the prompt response. I greatly appreciate it.