If you have an active service policy that redirects traffic to an Intrusion Prevention System (IPS)/Context Aware (CX) module (that you replaced with the ASA SFR), you must remove it before you configure the ASA SFR service policy.Before You BeginĬonsider this important information before you attempt the procedures that are described in this document: Note: You can use the ASA SFR module in Single or Multiple context mode, and in Routed or Transparent mode. Application Visibility and Control (AVC).Next Generation Intrusion Prevention System (NGIPS).The Cisco ASA FirePOWER module also known as the ASA SFR, provides next-generation Firewall services, such as: If your network is live, ensure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment. FireSIGHT Management Center FS2000, FS4000 or virtual appliance.These components are required on the Cisco FireSIGHT Management Center: Note: If you want to install FirePOWER (SFR) Services on an ASA 5585-X Hardware Module, refer to Install a SFR Module on an ASA 5585-X Hardware Module. FirePOWER Software Version 5.3.1 or later.Cisco ASA platforms 5512-X through 5555-X.Cisco ASA software Version 9.2.2 or later.In order to install the FirePOWER Services on a Cisco ASA, these components are required: If a password was not set, then press Enter: In order to access the privileged EXEC mode, enter the enable command into the CLI. Ensure that you have access to the privileged EXEC mode.Ensure that you have at least 3GB of free space on the flash drive (disk0), in addition to the size of the boot software.Prerequisites RequirementsĬisco recommends that your system meet these requirements before you attempt the procedures that are described in this document: This document describes how to install and configure a Cisco FirePOWER (SFR) module that runs on a Cisco Adaptive Security Appliance (ASA) and how to register the SFR module with the Cisco FireSIGHT Management Center.
0 kommentar(er)
