Download Print this page

Cisco ASA Easy Setup Manual

Firepower module

Advertisement

Quick Links

Cisco ASA Firepower Module
Easy Setup Guide
You can easily set up your ASA Firepower Module
in this step-by-step guide
Preconfiguring
1
Configuring Security Policy
2
Updating Database
3
Reporting & Monitoring
4

Advertisement

loading

Summary of Contents for Cisco ASA

  • Page 1 Cisco ASA Firepower Module Easy Setup Guide You can easily set up your ASA Firepower Module in this step-by-step guide Preconfiguring Configuring Security Policy Updating Database Reporting & Monitoring...
  • Page 2 Preconfiguring Configuring Service Policy Preconfiguring Redirect traffic to the ASA Firepower module by creating a service policy on the ASA that identifies specific traffic that you want to send. Before You Begin Click [Configuration]. This guide provides information about basic configuration of security policies (ac - cess control policies) on the Cisco ASA Firepower module, using the Cisco Adap - tive Security Device Manager (ASDM).
  • Page 3 The [Permit traffic] sets the ASA to allow all traffic through, uninspected, if the module is unavailable. The [Close traffic] sets the ASA to block all traffic if the module is unavailable. Click [Use class-default as the traffic class]. Click [Finish].
  • Page 4 Click [New File Policy]. Click [ASA FirePOWER The [New File Policy] pop-up Configuration]. window appears. Enter a name for your new Click [Policies]. policy in the [Name] field. Click [Store ASA Fire- POWER Changes]. Cisco ASA Firepower Module Easy Setup Guide...
  • Page 5 Block Malware rules allow you to calculate the SHA- ● 256 hash value of specific file types, then use a cloud lookup process to first determine if files traversing your network contain malware, then block files that represent threats. Cisco ASA Firepower Module Easy Setup Guide...
  • Page 6 Click [Inspection]. Click [Apply All]. Caution At step , the intrusion policies [Connectivity Over Security] and so on require the NGIPS Li- ❻ cense. If you don t have this license, select the [None]. Cisco ASA Firepower Module Easy Setup Guide...
  • Page 7 Selecting a reputation level also selects all reputations more severe than that level. For example, if you configure a rule to block [Suspicious sites] (level 2), it also automatically blocks [High Risk] (level 1) sites. Cisco ASA Firepower Module Easy Setup Guide...
  • Page 8 As new vulnerabilities become known, Cisco releases rule updates that you can first import onto your ASA Firepower module, then implement by applying affected access control, network analysis, and intrusion policies. Rule updates are cumulative, and Cisco recommends you always import the latest update.
  • Page 9 Specify the time and day of and click two options be- the week when you want low. weekly GeoDB updates to occur. We recommend [Daily]. Click [Save]. Click [Save]. Click [Geolocation Up- dates]. Cisco ASA Firepower Module Easy Setup Guide...
  • Page 10: Viewing Reports

    Monitoring the System Reporting & Monitoring Click [Monitoring]. Click [ASA FirePOWER The Cisco Adaptive Security Device Manager (ASDM) provides many useful report - Monitoring]. ing and monitoring features to assist you in the daily administration of your system. Viewing Reports Click [Home].
  • Page 11 © 2017 Cisco and/or its affiliates. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the...