About the ASA
•
•
•
•
•
•
•
•
About the ASA
The ASA provides advanced stateful firewall and VPN concentrator functionality in one device.
You can manage the ASA using one of the following managers:
• ASDM (Covered in this guide)-A single device manager included on the device.
• CLI
• Cisco Security Manager-A multi-device manager on a separate server.
You can also access the FXOS CLI for troubleshooting purposes.
Unsupported Features
The following ASA features are not supported on the Firepower 2100:
• Integrated Routing and Bridging
• Redundant interfaces
• Clustering
• Clientless SSL VPN with KCD
• ASA REST API
• ASA FirePOWER module
• Botnet Traffic Filter
• The following inspections:
Migrating an ASA 5500-X Configuration
You can copy and paste an ASA 5500-X configuration into the Firepower 2100 in Appliance Mode. However,
you will need to modify your configuration. Also note some behavioral differences between the platforms.
Cisco Firepower 2100 Getting Started Guide
52
• SCTP inspection maps (SCTP stateful inspection using ACLs is supported)
• Diameter
• GTP/GPRS
ASA Deployment in Appliance Mode