cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2611
Views
0
Helpful
2
Replies

ASA with Sourcefire and FTD Deployment Mode

patelvc7601
Level 1
Level 1

Hi 

 

I have a situation where Cisco ASA with Sourcefire is inline mode , ASA is acting as a default gateway & can monitor the traffic .

Now Customer wants to monitor the traffic for rest of the IP, where ASA is not in the path . reading the https://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/firewall/asa-firewall-cli/modules-sfr.pdf

Looks like , Passive monitor-only (traffic forwarding) mode will help but than it says ASA needs to be in transparent mode.

in short, I wanted to use ASA with Source fire for inline mode for some interface & inline tap monitor mode /or even passive monitor mode . does this possible ? 

 

Does FTD help in this situation ?  

Sincerely

Viral Patel

 

 

1 Accepted Solution

Accepted Solutions

Marvin Rhoads
Hall of Fame
Hall of Fame

You cannot mix and match interface modes on an ASA with Firepower service module since a single service-policy governs the traffic redirection.

 

With FTD the multiple interfaces can be in different modes and there are other options with your policy that can be used as well. But the migration from ASA with Firepower to FTD potentially introduces other issues depending on how the ASA is being used.

View solution in original post

2 Replies 2

Marvin Rhoads
Hall of Fame
Hall of Fame

You cannot mix and match interface modes on an ASA with Firepower service module since a single service-policy governs the traffic redirection.

 

With FTD the multiple interfaces can be in different modes and there are other options with your policy that can be used as well. But the migration from ASA with Firepower to FTD potentially introduces other issues depending on how the ASA is being used.

As always , Marvin rocks.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: