cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Welcome to Cisco Firewalls Community


256
Views
0
Helpful
3
Replies
Beginner

Change Security Level in ASA 5508x with Firepower Services 6.2.2

How to change security level in ASA 5508-x with firepower services 6.2.2 using Firepower Device Manager ?

 

I am choosing interfaces into inside,outside and dmz zones accordingly but after that during show running-config checking its showing default security level to zero(0) for all interfaces.

 

How to solve this issue?

Everyone's tags (5)
3 REPLIES 3
Enthusiast

Re: Change Security Level in ASA 5508x with Firepower Services 6.2.2

By default, the security level for an interface is 0, with the one exception being the inside interface which will default to 100. However, you can change any of these by using the security-level X command on the interface. For example, if you want the DMZ to be 50 you can do the following.
int gix/y

nameif dmz
security-level 50

 

HTH,

Lance Cantrell

Highlighted
Beginner

Re: Change Security Level in ASA 5508x with Firepower Services 6.2.2

but this model dont have any global configuration mode..you can only configure through firepower device manager..

find the attachment..

Enthusiast

Re: Change Security Level in ASA 5508x with Firepower Services 6.2.2

Ahh, you're running FTD software and not ASA code with an SFR module. With the FTD software, you don't define security-levels as there is just a single global access-list called an access-control policy that is used to control traffic. Inside that policy you're select which interface, network or zone you want for source and for the destination to match traffic on. Also to note is that the CLI is very limited with FTD as it's designed to be managed by an FMC. 

 

HTH,

Lance Cantrell