Trying to run an FPR-1010 as an ASA device.....

[Adamciscoaccount]

Hi all,

I have increasingly been having issues around two new FPR1010s bought as a cheaper basic set of firewalls to add to our network. I was hoping I could get some advice :)

1) My first FPR1010 I thought I would configure the management port so I could get it on our network and configure the ASA remotely. By doing so I have ip addressed "Management0" and lost the ip addressing set on the inside ports by default. Is there any way for me to use cli to turn this into an ASA/ASDM device

2)After the mistakes on the first device I am trying to run this AS PER THE GUIDE. Which states after unboxing and powering, I should be able to use an inside DHCP enabled firewall port and browse to https://192.168.1.1/admin. This however fails, asking me to download/run (windows) "admin" which fails. Or I get a connection error.

I am starting to think we maybe should have stuck to ASA550X models.... Can any one help with this? Have you had similar issues?

[Marvin Rhoads]

Did you buy them with FTD image and wish to convert to ASA image?

If so, are you following this guide:

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html

?

[Adamciscoaccount]

Hi Marvin

Thanks for your response, I believe we must of, when I console to the device it says firepower>. I was hoping that using the inside ports and a https connection we would be able to access firewall functionality.

 I think it was just assumed that this was an ASA style firewall successor to the 5506-x.

I assume that if we buy more for tech refresh there is a different part number or we must request specifically that we want the 1010 to be have the ASA - OS?

Thanks Marvin

[Marvin Rhoads]

Part number FPR1010-ASA-K9 would be a 1010 with the ASA image preloaded on it.

However FTD is a more modern system and more capable of protecting against current threats. If you buy just the ASA imaged appliance you wont have any NGFW or IPS features available. There are only a few things FTD cannot do that ASA can (like optional AnyConnect modules, hostscan and some other more obscure features).