CISCO FirePower (NGFW) Best Practice

[LALIT MEHTA]

As we know right now CISCO FirePower Is very demanding Product in Market.

So i am going to Start This Discussion for Firepower Best Implementation Solution.  

[Kuat Bakenov]

try find in cisco validated desing guide.

[mivanepp]

Does anyone have info related to FW rules Best Practices?  I have found several tech docs, but nothing directly related to cleaning up the rules and a solid process to maintain future "healthy state"

[Kuat Bakenov]

deploy as FIREWALL - (this old document - redirect to new):

www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Aug2013/CVD-FirewallAndIPSDesignGuide-AUG13.pdf

THEN DEPLOY FP SERVICES: - but this bla bla bla... ))))

Design and Deployment of SourceFire NGIPS and NGFWL (2014 Melbourne)

LAST COMMENT:

https://supportforums.cisco.com/discussion/13073441/firepower-deployment-best-practices-cvds-deployment-guide

configuration guide - not best practice...

i think deploy in baypass mode...if not work FPservices....work BASE firewall