FirePower Deployment

[adamtodd16]

Hi All,

New to the world of IPS and Firepower. Wondering if these devices must sit inline or just on the network somewhere? 

Currently have a 2951 as edge facing device and the plan would be to put a 5515-X with FirePower "behind" that device. Just wondering where it would sit? Can't seem to find much documentation for this online. 

Thanks!

[brianirwin]

Yeah docs are a bit obtuse.  Ours sits behind our edge routers, but we also use a 5585X where there's a separate hardware module with a backplane connection to the ASA.   ASA is deployed but still in the process of playing with the IPS in network discovery mode.   It's a powerful device that will show you tons of information about the traffic on your network.

[jbelmudes]

Hi,

Maybe these network diagrams will help you: http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html#pgfId-41903.

J