cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


206
Views
0
Helpful
3
Replies
Highlighted
Beginner

5508-x FirePOWER newby

Hello everyone.

We just took on a client with two locations, each with an 5508-X.

Before coming over to us, they had just renewed their SMARTnet agreement and FirePOWER services (IPS, AMP, URL filtering) for 3 years with their old IT company.

Now here is where I am getting a little lost because we no longer do much with Cisco, its all Meraki in our world.

Both of the ASA’s FirePower modules are managed by the old ITs Firepower Management Center… some VM in their private cloud.

 

I have two questions:

  1. To your knowledge, is that VM (FirePOWER Management Center) available for free as long as the ASA managed by it is licensed with the services? I am thinking of spinning something up at either our datacenter or the clients vmware host.
  2. If we decide not to go with the VM, can the FirePOWER module be administered from the ASA? If so, what do we give up?

 

Thanks in advance.

3 REPLIES 3
VIP Advisor

Re: 5508-x FirePOWER newby

FMC has different License - its not free with ASA Firepower Module

 

ASA can be managed with ASDM, But not Firepower Module, it required FMC.

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: 5508-x FirePOWER newby

appreciate the quick response.

attached picture is the licenses the client purchased.

5508xCapture.JPG

in summary, in order to take advantage of the services, an FMC is required - which is paid.

 

Beginner

Re: 5508-x FirePOWER newby

Dear,

 

Firepower can be managed locally via ASDM, but if you switch from FMC to local management you lost all the configuration.

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/200889-Using-ASDM-to-manage-a-FirePOWER-module.html

 

So you need to pay attention during the migration.