About The Asa - Cisco Firepower 2100 Getting Started Manual

About the ASA

•
•
•
•
•
About the ASA
The ASA provides advanced stateful firewall and VPN concentrator functionality in one device.
You can manage the ASA using one of the following managers:
• ASDM (covered in this guide)—A single device manager included on the device.
• CLI
• Cisco Defense Orchestrator—A simplified, cloud-based multi-device manager
• Cisco Security Manager—A multi-device manager on a separate server.
You can also access the FXOS CLI for troubleshooting purposes.
Unsupported Features
The following ASA features are not supported on the Firepower 2100:
• Integrated Routing and Bridging
• Redundant interfaces
• Clustering
• Clientless SSL VPN with KCD
• ASA REST API
• ASA FirePOWER module
• Botnet Traffic Filter
• The following inspections:
Migrating an ASA 5500-X Configuration
You can copy and paste an ASA 5500-X configuration into the Firepower 2100 in Appliance Mode. However,
you will need to modify your configuration. Also note some behavioral differences between the platforms.
1. To copy the configuration, enter the more system:running-config command on the ASA 5500-X.
Cisco Firepower 2100 Getting Started Guide
166
Log Into ASDM, on page 175
Configure Licensing, on page 176
Configure the ASA, on page 181
Access the ASA and FXOS CLI, on page 183
What's Next?, on page 184
• SCTP inspection maps (SCTP stateful inspection using ACLs is supported)
• Diameter
• GTP/GPRS
ASA Deployment with ASDM