cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

947
Views
60
Helpful
27
Replies
shahjs2002
Beginner

How to activate Firepower services ASA 5516

Dear Technical Support Team, I recently join IT Department in company I found there is Cisco ASA without Firepower Service, URL Filtering, Application base control etc. can some one suggest me how to activate these services. do I need to purchase license? 

Shahzad Khan
IT Manager
MCSE, VCP-DCV5, CCIP, CCNP, CCNA, MCP, OFC
Shahjs2002@yahoo.com
00966-542239758
27 REPLIES 27
Tyson Joachims
Rising star

You will need a license to activate any of those features. Here is a quick start guide that should really help: https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

balaji.bandi
VIP Expert

If you are using ASDM you can view the module and it required License to get signature and support.

 

can you post show modules

 

BB

***** Rate All Helpful Responses *****

How to Ask The Community for Help

 show module

Mod Card Type Model Serial No.
---- -------------------------------------------- ------------------ -----------
1 ASA 5516-X with FirePOWER services, 8GE, AC, ASA5516 Jxxxx
sfr FirePOWER Services Software Module ASA5516 Jxxxx

Mod MAC Address Range Hw Version Fw Version Sw Version
---- --------------------------------- ------------ ------------ ---------------
1 6cb2.aebe.ee04 to 6cb2.aebe.ee0c 3.0 1.1.8 9.8(4)22
sfr 6cb2.aebe.ee03 to 6cb2.aebe.ee03 N/A N/A 6.2.0-362

Mod SSM Application Name Status SSM Application Version
---- ------------------------------ ---------------- --------------------------
sfr ASA FirePOWER Up 6.2.0-362

Mod Status Data Plane Status Compatibility
---- ------------------ --------------------- -------------
1 Up Sys Not Applicable
sfr Up Up

 

Shahzad Khan
IT Manager
MCSE, VCP-DCV5, CCIP, CCNP, CCNA, MCP, OFC
Shahjs2002@yahoo.com
00966-542239758

show module sfr details
Getting details from the Service Module, please wait...

Card Type: FirePOWER Services Software Module
Model: ASA5516
Hardware version: N/A
Serial Number: JXXXXXXXXX
Firmware version: N/A
Software version: 6.2.0-362
MAC Address Range: 6cb2.aebe.ee03 to 6cb2.aebe.ee03
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 6.2.0-362
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: No DC Configured
Mgmt IP addr: 192.168.45.45
Mgmt Network mask: 255.255.255.0
Mgmt Gateway: 0.0.0.0
Mgmt web ports: 443
Mgmt TLS enabled: true

Shahzad Khan
IT Manager
MCSE, VCP-DCV5, CCIP, CCNP, CCNA, MCP, OFC
Shahjs2002@yahoo.com
00966-542239758

you can view the video and understand - so you can configure the same in your environment. i would suggest start with low effected and build slowly more advanced rules.

 

https://www.youtube.com/watch?v=glU8AucPlKI

BB

***** Rate All Helpful Responses *****

How to Ask The Community for Help

how to create basic web policy to deny certain category;how to redirect traffic to SFR module

Thanks for your reply. dear as i saw in video , i don't have firepower reporting and Firepower Dashboard, i have only these option you can see in attach picture.    sorry i am of the level of beginner.  if just give me hints how to add these Dashboard and Firepower configuration in ASDM then i'll handle . 

ASDM-Config.jpg

ASDM-Home.jpg

  

Shahzad Khan
IT Manager
MCSE, VCP-DCV5, CCIP, CCNP, CCNA, MCP, OFC
Shahjs2002@yahoo.com
00966-542239758

when you click home you should see below

 

image.png

BB

***** Rate All Helpful Responses *****

How to Ask The Community for Help

Tyson Joachims
Rising star

Look at this video for how to re-image and setup the SFR module: https://www.youtube.com/watch?v=PNFbTKcG0l0

If you don't want to re-image and want to use version 6.2 currently on your ASA, just start the video at the 4:10 mark.

Here is the installation document the video uses: https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

If you want to re-image with the newest recommended software release (6.6.1), you can get that here (requires Cisco login): https://software.cisco.com/download/home/286285782/type/286277393/release/6.6.1

Dear Tyson Joachims, when i try to download  it's give me this msg.   

To Download this software, you must have a valid service contract associated to your Cisco.com profile.
If you do not have a service contract you can get one through:
  • Your Cisco Account Team if you have a direct purchase agreement with Cisco
  • Your Cisco Partner or Reseller
Once you have the service contract you must associate your service contract to your Cisco.com user ID with Profile Manager
Shahzad Khan
IT Manager
MCSE, VCP-DCV5, CCIP, CCNP, CCNA, MCP, OFC
Shahjs2002@yahoo.com
00966-542239758

Sure you need to have suport contract with cisco for download image and also updates as i was stated in the other post

BB

***** Rate All Helpful Responses *****

How to Ask The Community for Help

right Mr. Balaji,  then let me start with current image and later i'll see for support contract

Shahzad Khan
IT Manager
MCSE, VCP-DCV5, CCIP, CCNP, CCNA, MCP, OFC
Shahjs2002@yahoo.com
00966-542239758

Sure that is good move and explore contracts later once you able to use exiting product what you have.

BB

***** Rate All Helpful Responses *****

How to Ask The Community for Help

please check attach picture . is any file missing related firepower. 

ASDM-Files.jpg

Shahzad Khan
IT Manager
MCSE, VCP-DCV5, CCIP, CCNP, CCNA, MCP, OFC
Shahjs2002@yahoo.com
00966-542239758

Hard to say. According to https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html, you can put the boot image on disk0:/ and then use it to load the SFR module. Since you're using the software that is already there, are you able to login to the SFR module using the following command?:

ciscoasa# session sfr console

The default username and password is admin & Admin123

Content for Community-Ad