Firesight or CSM

[ron.hehemann1]

Customer wants to manage his ASA devices, he also want to use Prime infrastructure.

For the ASA I can choose the CSM (which is "outdated" I think) or the Firesight manager.

What should I advise?

I know you can configure in the CSM, but as a workaround until the Firesight is "upgraded to do this also" this could be done in ASDM I think.

[Marvin Rhoads]

Depends on what you mean by "manage".

CSM won't do anything to manage FirePOWER module policies and settings. Its primary strengths are:

1. managing ASAs across an enterprise to allow for common objects and configuration management and

2. acting as a single log server with very good management and indexing of both ASA syslog messages and, if you have them, the old style of IPS log messages (transmitted via the SDEE protocol).

Likewise FireSIGHT Manager won't do anything to manage ASAs (apart from their FirePOWER modules).

Prime Infrastructure can do basic fault and performance management of the ASAs.