ASA 5500-X source fire module

[S.ashok S]

Hi,

Can we create time based access policies in SourceFire module in 6.0.0 version.

Thanks and regards,

Ashok

[Oliver Kaiser]

This is not possible at the moment. FMC exposes a REST API which could be used to enable/disable policies and deploy configuration, which could be used to write a script for time-based rules.

The feature should be implemented in a limited version in 6.2 and be fully integrated in 6.3 (according to a Cisco SE)

[Dennis Perto]

This is only for Firepower Threat Defense, and not Firepower Services, as I understand.

[Oliver Kaiser]

Are you refering to the api or the feature release?

[Dennis Perto]

I am refering to the time based QoS policies, in the future releases.

[Oliver Kaiser]

I was talking about time-based access-control-policy rules, not QoS.

[Dennis Perto]

The unofficial roadmap (seen at SEVT) says that "time range" will be able to migrate from ASA config to FTD after 6.2.

[Oliver Kaiser]

You are right considering the SEVT roadmap. According to my unofficial info it might hit 6.2 but 6.3 is more realistic.