How to configure Firepower

[Newstead Technologies Pte Ltd]

Hi Guys,

I am new in Cisco Firewall and got confused on firepower services. I already configured configured ASA 5506-x but then I realized that I forget something and that is the Firepower. On the Configuration tab I didn't see the Firepower Tab. I tried to set-up and I failed and now I don't know what to do. I don't know also if my firepower license is useless without having that.

Can you help on the step how to have the Firepower tab on my ASDM?. 

I attached the Network Diagram so maybe it can help.

Your response is greatly appreciate. 

Regards,

Michelle

[Pranay Prasoon]

First of all , can you please check if firepower is already installed on ASA.

run command "show module sfr detail". Mangle IP addresses and paste output here.

[Newstead Technologies Pte Ltd]

FIREWALL(config)# show module sfr details
Getting details from the Service Module, please wait...

Card Type: FirePOWER Services Software Module
Model: ASA5525
Hardware version: N/A
Serial Number: FCH204473CA
Firmware version: N/A
Software version: 5.4.0-764
MAC Address Range: 286f.7f63.62d8 to 286f.7f63.62d8
App. name: ASA FirePOWER
App. Status: Up
App. Status Desc: Normal Operation
App. version: 5.4.0-764
Data Plane Status: Up
Console session: Ready
Status: Up
DC addr: No DC Configured
Mgmt IP addr: 192.168.80.6
Mgmt Network mask: 255.255.255.0
Mgmt Gateway: 0.0.0.0
Mgmt web ports: 443
Mgmt TLS enabled: true

I hope this can help.

[Pranay Prasoon · Accepted solution]

okay, so this is ASA5525. You can manage firepower through ASDM , if you have following ASA, Firepower and ASDM images ,

ASA5585-X Series, ASA5512-X, ASA5515-X, ASA5525-X, ASA5545-X, ASA5555-X

Firepower System Version	ASA OS	ASDM Management
5.3.1.x	9.2(4.5) and later	—
5.4	9.2(4.5) and later	—
5.4.0.2 - 5.4.0.9	9.3(3.8) and later 9.4(2) and later 9.5(1.5) and later 9.6(1) and later	—
6.0.0.x	9.4(2) and later (no ASDM management or captive portal) 9.5(1.5) and later (captive portal in 9.5(2) and later) 9.6(1) and later	7.5(1.112) and later
6.0.1.x	9.4(2) and later (no ASDM management or captive portal) 9.5(1.5) and later (captive portal in 9.5(2) and later) 9.6(1) and later	7.6(1) and later
6.1.x.x	9.5(2) and later 9.6(1) and later	7.6(2) and later

Please see last three tables

http://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html.

I would suggest to first upgrade ASA and  re-image firepower to 6.0 or later as this is a new appliance. Please see link below

http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

The you can follow below link for on-box management

http://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html

[Newstead Technologies Pte Ltd]

Okay I will try this steps. But I'm scared since this Firewall is already production and not sure if they will allow downtime. 

Anyway, Thank you so much for your response. I will update you once I successful do this. Wish me luck. :)

[Newstead Technologies Pte Ltd]

Another thing, can I also use this step if my Firewall is 5506-x?

[Pranay Prasoon]

yes you can.However the software requirements may change for 5506. Please see link that I already shared

http://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html

[Newstead Technologies Pte Ltd]

Okay, Noted. Thank you so much.