Cisco Firepower Threat Defense (FTD)

[Aleksey Pan]

WELCOME to FTD

"Choose one of the topics below to help you on your journey with NGFW/FTD"

• 
  Start
• 
  Config-examples
• 
  Maintenance/Upgrade
• 
  Troubleshooting
• 
  Tools
• 
  Training

Start

Getting Software

• Download Software for Firepower Threat Defense (FTD)
• Download Software for Firepower Management Center (FMC)

Compatibility Guides

• ASA and FTD Compatibility Guides
• ASA Compatibility Guide
• Cisco Firepower 4100/9300 FXOS Compatibility

PSIRT & Field Notice

•   Security Advisory Page
•   Security Advisories, Responses and Notices

Datasheets

• Cisco Firepower 1000 Series Data Sheet
• Cisco Firepower 2100 Series Data Sheet
• Cisco Firepower 4100 Series Data Sheet
• Cisco Firepower 9300 Series Data Sheet

Configuration Guides,  Release notes.

• NGFW Configuration Guides
• Release Notes
• Migration Guides
• Cisco ASA and Firepower Threat Defense Reimage Guide
• Upgrade Procedure Through FMC for Firepower Devices
• Install and Upgrade Guides

High Availability (Failover and Cluster):

• Deploying a Cluster for Firepower Threat Defense for Scalability and High Availability 

Logging:

• Configure Logging on FTD via FMC

Upgrade Resources

• Cisco Firepower Management Center Upgrade Guide
• Upgrade FTD HA Pair on Firepower Appliances

Troubleshooting

• Firepower Threat Defense Transparent Firewall Mode Advanced Concepts and Troubleshooting Tips 
• Cisco Firepower NGFW- FTD Troubleshooting TechNotes

NGFW Tools and Resources

• Bug Search Tool
• Firewall Configuration Conversion Tool
• Cisco CLI Analyzer Tool
• Product License Registration
• SNMP Object Navigator

Training Resources

• NGFW-Onboard Training Videos
• NGFW-Implement Training Videos

Certifications

• Thoughts on CCIEv6 preparation-Podcast
• CCIE Security Certification and Training
• CCIE Security Exam Topics
• Cisco Certifications and Training Program (CCNA, CCNP)

[Vi2]

Trying to get a solid answer on whether or not traffic that is using only the prefilter bypasses CPU cycles.  I'm getting different answers on this.

[Sylvester_aak1978]

I have my local Endpoint set to Bidirectional connection type, but it is not able to originate or initiate connection with the remote node. How do I set it to be the initiator? This is FirePower FTD.

> show crypto isakmp sa | include 147.1.1.1

2150272151 23.1.1.1/500                                  147.1.1.1/500                                        STANDBY    RESPONDER

Connection Type

Specify the allowed negotiation as bidirectional, answer-only, or originate-only. Supported combinations for the connection type are:

Remote Node	Central Node
Originate-Only	Answer-Only
Bi-Directional	Answer-Only
Bi-Directional	Bi-Directional
Table 1. Connection Type Supported Combinations

This  is the only guide I have and its not actually serving my needs. Any help?