Moving from CX to FirePower

[smartin]

Need to uninstall CX then install Firepower on a live system.

Any Docs on creating basic Policies to start with FirePower?

[Marvin Rhoads]

Sure. There are several great resources. Here are a few...

Cisco Live presentation on just what you're asking:

BRKSEC-2018 - Tips and Tricks for Successful Migration From ASA CX and Cisco Classic IPS to FirePOWER Solutions (2015 San Diego)

Basic policy setup guide:

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118595-configure-firesight-00.html

Also, you will want to use FirePOWER Management Center - the equivalent of "off-box" PRSM in the CX scheme of things. (It used to be known as FireSIGHT Managment Center and prior to that Defense Center - you may see those names in the older references sometimes.)

Here're the quick start guides for that:

http://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/vmware/fmcv/FMCv-quick.html

[smartin]

Installed VM version FirePOWER Management Center 6.1

[Marvin Rhoads]

That's a good start - you should go ahead and update it to the current 6.2.0.1.

Then you can build your FirePOWER modules with release 6.2 (and patch them to 6.2.0.1).

[Todd Killian]

I found the Tips and Tricks guide at http://www.download.safeplus.pl/Prezentacje/Cisco%20Live%20San%20Diego%202015/BRKSEC-2018.pdf