Management of Cisco ASA-5525-X qui URL filtering

[schnap]

HI, 

We bought two ASA 5525-X  with url filtering. I would like to manage them with FDM if possible. We don't want to buy FMC console. 

Every documentation talk about fdm to manage cisco with FTD image .... I'm a bit confuse. 

Is there any documentation or config guide to follow for this kind of setup ?

Thanks, 

[Marvin Rhoads]

Did you purchase the ASA with Firepower Threat Defense (FTD) image? If so then, yes - you can manage them with Firepower Device Manager (FDM). The FDM configuration guides are all linked on this page:

https://www.cisco.com/c/en/us/support/security/firepower-ngfw/products-installation-and-configuration-guides-list.html

If you have ASAs running the ASA software image and Firepower service module then you would use ASDM. In that case you have to first setup the module:

https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html#pgfId-152956

[schnap]

We purchase ASA without the FTD image. 

We only purchase ASA software image and firepower service module (url filtering only perhap) . 

So Would it be possible to manage firewall rule and firepower module with ASDM completely ? Will certain function will have to be configure with a separate console like FMC ? 

Thanks, 

[Marvin Rhoads]

Yes you can configure and manage it all via ASDM.

Some of the more advanced IPS setup can only be done in FMC but the URL Filtering setup can all be done in ASDM.

Historical reporting of Firepower events is not available with ASDM.

Also, you have to manually configure each module separately - even if they are in ASAs that are otherwise an HA pair. ASA HA isn't aware of nor does it sync the service module configurations.

FMC addresses all of those issues and more but does require an ESXi (or KVM or AWS) server to run it on and a license.