Use FMC to manage single FirePower Module?

[fishizza1]

Looking for advice for managing our FirePower module integrated with an ASA 5516.  Currently we manage it via the ASDM but I have been looking into using a FMC VM appliance.  Does it make sense to use FMC since we only have 1 firewall/1 FirePower?  Looks like some of the advantages of the FMC are managing multiple devices centrally which is not our case.  I find the ASDM management to be a bit clunky and it doesn't offer much in the way of reporting which is something I would really like.  Curious what others thoughts are on this.  Thanks

[Rob Ingram · Accepted solution]

@fishizza1 

Well you can actually purchase an FMC virtual license for 2 devices, so yes it might cheap enough to still be worthwhile for you.

FS-VMW-2-SW-K9

Cisco Firepower Management Center, Virtual (VMware) Firepower License, for 2 devices

https://www.cisco.com/c/en/us/products/collateral/security/firesight-management-center/datasheet-c78-743216.html

[fishizza1]

Thanks for your feedback.  That seems pretty affordable.  I guess the question then is the FMC better for management/reporting than the ASDM interface?  My guess would be yes but I haven't had much of a chance to play with it yet. 

[Rob Ingram]

@fishizza1 yes it would be better than the ASDM.

[Milos_Jovanovic]

There is a demo available (I believe it should be available with any Cisco.com account):

https://www.cisco.com/c/en/us/products/security/firepower-management-center/management-center-demos.html

BR,

Milos

[Milos_Jovanovic]

Hi @fishizza1,

Apart from benefit of centralized management (which doesn't make much difference for you), you also get benefit of centralized logging and reporting. AFAIK, it also offers more configuration options than ASDM.

Although it is fairly inexpensive in terms of VM/licensing, it does come with significant VM resource requirements, so have that in mind when making decission.

BR,

Milos

[fishizza1]

Oh yea that is pretty hefty memory requirements for managing 1 device.  Thanks