5508-x FirePOWER newby

[ibexpiotr]

Hello everyone.

We just took on a client with two locations, each with an 5508-X.

Before coming over to us, they had just renewed their SMARTnet agreement and FirePOWER services (IPS, AMP, URL filtering) for 3 years with their old IT company.

Now here is where I am getting a little lost because we no longer do much with Cisco, its all Meraki in our world.

Both of the ASA’s FirePower modules are managed by the old ITs Firepower Management Center… some VM in their private cloud.

I have two questions:

1. To your knowledge, is that VM (FirePOWER Management Center) available for free as long as the ASA managed by it is licensed with the services? I am thinking of spinning something up at either our datacenter or the clients vmware host.
2. If we decide not to go with the VM, can the FirePOWER module be administered from the ASA? If so, what do we give up?

Thanks in advance.

[balaji.bandi]

FMC has different License - its not free with ASA Firepower Module

ASA can be managed with ASDM, But not Firepower Module, it required FMC.

[ibexpiotr]

appreciate the quick response.

attached picture is the licenses the client purchased.

in summary, in order to take advantage of the services, an FMC is required - which is paid.

[AndreaTornaghi]

Dear,

Firepower can be managed locally via ASDM, but if you switch from FMC to local management you lost all the configuration.

https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/200889-Using-ASDM-to-manage-a-FirePOWER-module.html

So you need to pay attention during the migration.