03-31-2019 07:38 PM - edited 02-21-2020 08:59 AM
Hi,
We will be having a migration from Cisco Asa 5515-X to ASA 5516-X with Firepower. We have some discussion regarding the firepower, as the Firewall is the internet firewall they don't want to use the management port to be connected to their network for the Firepower. Is it possible to set-up the new firewall with firepower services without using the management port and use the data port?.
I'm new to ASA with firepower. Your answer is a big help to me.
Thank you in advance
Regards,
mich
03-31-2019 10:06 PM
It’s not possible. The Firepower service module requires the ASA’s physical management port to be used for both configuration and eventing communications.
04-01-2019 12:48 AM - edited 04-01-2019 12:48 AM
hi,
marvin is correct. you'll need the MGMT port and IP to be used for the FP module default GW.
this is to connect to the FP IP and mange it either by ASDM or FMC.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide