FirePOWER policies on local ASA after adding to FireSIGHT Mgmt Center

[chris.berry.1]

Are the settings and policies of a local ASA with FirePOWER wiped out or overridden upon adding the device to be managed by FireSIGHT Management Center? I have an ASA which has been functioning standalone with FP and need to now add it to FireSIGHT Defense Center/Management Center without losing the existing policies.

Thanks.

[Marvin Rhoads · Accepted solution]

Simply adding it as managed will not overwrite a given ASA's FirePOWER module's local policies.

However as soon as you deploy any policy (Access control, Intrusion, File, System, Health etc.) from the managing FireSIGHT Management Center it will overwrite the one on the ASA.

You could export the local one using the ASDM manager and then import it into FireSIGHT for re-deployment as a centrallly-managed policy.