ASA 5500-X with Firepower services management

[dngore]

Hi,

I just want to reconfirm my understanding is that ASDM can manage/configure firepower functionalities like IPS, File and URL on ASA55-X with firepower module. We need not to take FMC for firepower services management. 

Is this correct understanding?

Also, can FMC manage ASA functionality on NGFW devices?

Regards,

D.M.Gore

[Sheraz.Salim]

with firepower and ASDM only downside is there is no network discovery function available in ASDM.

[dngore]

So, is it recommended to have ASDM and FMC to manage ASA 5500-X with firepower services?

[Sheraz.Salim]

if you have budget and resource in that case with deployment of 5500-x model with FMC. The FMC will manage the sfr module (firepower sensor module in ASA) via FMC as a central point of contact to push different policy for different ASA box (in case if you have more than one ASA).

but if no budget  and only 1xASA with SFR than this depends you can manage the SFR from the ASDM.

there is no recommendation all depends what is your requirement.  if you have a vmware esxi running than you can install the vFMC and mange the boxes. having said that one more point. the SFR in ASA use traditional lic as compare with FTD they need smart lic.