cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1373
Views
10
Helpful
3
Replies
tht1013
Beginner

HELP! FPW2130 FTD manage by FMC without internet connection

Hi,

We buy 2 ASA5545-x with firepower services 2 years ago and it work well in our company.

Because there is no internet connection in our network.So we use the classic license  to regeist the FIREPOWER service and download the IPS rule every month. and upload it by hand.

Now we need buy 2 Firewall. But the ASA series is going to EOS. So the options is only Firepower 2100 series.

But i check the document. Because we need the IPS. so the only options is running the FTD software.

But FTD is the SMART license. MUST have a internet connection. But our company policy is not allow any devices in the network to connect to the internet. So it bother me so much. Is there any solution that FPW2100 running FTD that doesn't need the internet connection. Thanks for any help.

 

Tom

1 ACCEPTED SOLUTION

Accepted Solutions
Mohammed al Baqari
VIP Advisor

Hi,

Smart Licensing have 'satellite' feature which basically puts a virtual
appliance in your environment to connect to internet for smart licensing.
All your appliances communicate with this VM internally.

https://www.cisco.com/web/software/286285517/137012/Smart_Software_Manager_satellite_3.0.4_Installation_Guide.pdf

https://www.cisco.com/c/dam/en_us/buy/smart-accounts/ssm-satellite-enhanced-edition-faqs-2018.pdf

**** please remember to rate useful posts

View solution in original post

3 REPLIES 3
Mohammed al Baqari
VIP Advisor

Hi,

Smart Licensing have 'satellite' feature which basically puts a virtual
appliance in your environment to connect to internet for smart licensing.
All your appliances communicate with this VM internally.

https://www.cisco.com/web/software/286285517/137012/Smart_Software_Manager_satellite_3.0.4_Installation_Guide.pdf

https://www.cisco.com/c/dam/en_us/buy/smart-accounts/ssm-satellite-enhanced-edition-faqs-2018.pdf

**** please remember to rate useful posts

View solution in original post

Hi Mohammed,

Thanks for replying. As you mentioned i saw the solution you provided. But it seems that the satelite server MUST connect internet.

Because the network enviroment do not allow any internet connection include the satelite server. Is there otherway to solve the license problem?Thank you very much.

 

Tom

No, this is the only option. You can create a new zone isolated for
satellite server and let it connect to internet. It needs outbound
connection only using 443. No need for inbound connections.

***** please remember to rate useful posts
Content for Community-Ad