ASA 5506-X with FirePower Routing Option Not showing from FMC

[subrun.jamil]

I have a ASA 5506-X registered with FMC. This is a new Device just registered to FMC to manage. 

I am looking for routing options to see how to do the Static Routing or if it supports Dynamic Routing Protocol or Not. But I do not see any option related to routing once I go to that device FMC >> Device Management >> Devices. 

I attached an image to refer what i see now currently. 

Can you advice what I am missing ?

[Muhammad Awais Khan]

Hi,

It seems you are using ASA software code with Firepower Service and Firepower component managed by FMC ? If yes then you cannot configure ASA software code part from FMC like L3 Routing, DHCP, NAT. It need to be configure from cli or ASDM. From FMC, you can configure features like  AMP and IPS inspection as you have license for these 2 features. 

You can also upgrade your ASA 5506 software from ASA to FTD, after that you will be able to configure every thing from FMC.

[subrun.jamil]

Thank You for your reply. From here If I need to Upgrade to FTD can you advise the link to follow ? 

At this moment If I do upgrade , to FTD is that I need to do the License part again ? Currently I see from FMC for this Device it has Protection, Control , Malware license.

[Muhammad Awais Khan]

Hi,

Yes license will be move easily. You can do it by your self or you can open the case by sending email to licensing@cisco.com or directly from TAC.

You can create Smart Account if you have not created yet and register your FMC and ASA. It will help you later on to move the licenses from ASA to FTD. Further smart account is mandatory for FTD. 

To create smart account visit below website:

https://www.cisco.com/c/en/us/products/software/smart-accounts.html

For installing FTD to ASA box, follow below:

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200884-installing-and-upgrading-firepower-threa.html

You can remove the device from FMC before installation. Once done with FTD software, as mentioned in the document you have to add it again.

For Smart Account FAQ and benefits, visit:

https://www.google.com/url?sa=t&source=web&rct=j&url=https://www.cisco.com/c/dam/en/us/products/collateral/software/smart-accounts/q-and-a-c67-741561.pdf&ved=2ahUKEwj65YnWqa_nAhUe4zgGHby2BR0QFjAAegQIBRAB&usg=AOvVaw30dWvCvi-d43olZYIu-9h8

 

[Muhammad Awais Khan]

@subrun.jamil I just realize FTD latest software's are not supported on ASA5506-x. Last supported version is 6.2.3 which is quite old now. so I will suggest you to stick with ASA with Firepower services. During next license renewal, change the appliance to FPR1010.

[subrun.jamil]

Hello Muhammad, 

Currently I dont have access to this device through ASDM. I think once it is added to FMC you cannot manage it from 2nd manager ( i mean from ASDM ) 

and I can only Login to CLI ( other than through FMC ) which prompt look like attached.

[Muhammad Awais Khan]

Can you check "show version" from CLI ?

[Muhammad Awais Khan]

ASDM and FMC will work independently. You can still manage ASA with ASDM and FPR WITH FMC. ASDM was working before with you or it never setup ?