FTD virtual appliance in AWS

[sweigle88]

Hi,

We would like to perform various testing on the Cisco Firepower and therefore we would like to stand up a Firepower in AWS.  I've created a cloudformation template and subscribed to the firepower aws subscription.  I created 4 network interfaces and they are attached to the instance as described in the deployment documents published by cisco for their aws appliance, but it appears to only have one interface in the config that it is using:

> show ip

System IP Addresses:

Interface Name IP address Subnet mask Method

TenGigabitEthernet0/0 outside 100.64.37.81 255.255.255.128 DHCP

TenGigabitEthernet0/1 inside 192.168.45.1 255.255.255.0 manual

The management interface is not set. 

Is there a way to configure this virutal appliance via the command line?  It has been a while for me, but I'm used to IOS and configuring via the command line, but all I see is that you need to use a GUI for these firewalls?

thanks

[Marvin Rhoads · Accepted solution]

"show network" will show the management interface details.

Firepower requires using a GUI (API is available for some things). It is usually FMC (a separate centralized server) when running multiple FTD devices but you can also use the local GUI known as Firepower Device Manager. There's also a cloud-based option - CDO.

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/aws/ftdv-aws-gsg/ftdv-aws-fdm.html

[sweigle88]

Thanks Marvin.  I did see that you can configure these firewalls through Ansible.  Through User Data, it sure would be nice to place an initial config on it.    It just would be nice to not have to worry about another machine or how to securely connect to the firewall for initial configuration.

[Marvin Rhoads]

I've not done it myself but you can automate FTD deployment using Terraform and the like.

Have a look at this YouTube series:

https://www.youtube.com/watch?v=TvcuXP3Yn-0