Is there something better than ASDM to manage FirePOWER services?

[pmcamilleri]

Hi all

I currently use ASDM ver 7.8(2) to manage our ASA FirePOWER services. I tend to find it antiquated and limited. Is there a better software application I could use and if yes would I need to purchase it?

Thanks

[Sheraz.Salim]

if you have vm resource than you can install a vFMC once install you can add the sfr in your ASA to vFMC. depends what software support you have with cisco. if you have a support contract you can download the image from cisco software website.

[pmcamilleri]

How about FirePOWER Device Manager? I've read that this is replacement of ASDM. Looking at a few screenshots it looks more user friendly, modern and I suspect more features. Would we need to buy this or do we qualify for an upgrade?

[Sheraz.Salim]

FirePOWER Device Manager you have to convert your ASA box into FTD for this you need a smart account. FTD does not work with traditional lic where as SFR in ASA does.

it depends what you want if you good in firepower side than go for FTD but if you new in Firewall side in regards to firepower than stick with SFR once you understand the software then make your move.

[pmcamilleri]

So in our case this would not apply since we are running ASA Firepower on our Cisco 5512-X and this is being managed by ASDM which sucks.

[Sheraz.Salim]

you can install the vFMC and add the SFR module in to FMC.

[Marius Gunnerud]

Not to mention the FDM is limited in the available configuration features.  If you have the budget for it FMC is the way to go.

[pmcamilleri]

Unfortunately we do not have the budget for FMC. The Firepower upgrade was already expensive.

[Sheraz.Salim]

sorry to hear that. in that case you only can fine tune the ASDM firepower tab and create your network policies. however it was some limitation in ASDM with firepower. for example the network discovery is not available in ASDM firepower. however this functionality can be achieved with FMC adding the SFR in it.

please do not forget to rate.