Perform Initial Asa Firepower Setup; Deploy The Asa Firepower Module In Your Network - Cisco ASA Series Configuration Manual

Chapter 7 ASA FirePOWER Module

Perform Initial ASA FirePOWER Setup

Deploy the ASA FirePOWER module in your network, and then access the ASA FirePOWER CLI to
perform initial setup.
•
•
•

Deploy the ASA FirePOWER Module in Your Network

See the section for your ASA model to determine how to connect the ASA FirePOWER module
management interface to your network.
ASA 5585-X (Hardware Module)
The ASA FirePOWER module includes separate management interfaces from the ASA.
ASA 5585-X
SSP
All management traffic to and from the ASA FirePOWER module must enter and exit the Management
1/0 or 1/1 interface. Because this interface is not an ASA data interface, traffic cannot pass through the
ASA over the backplane; you need to physically cable the management interface to an ASA interface.
The ASA FirePOWER module needs Internet access. See the following typical cabling setup to allow
ASA FirePOWER access to the Internet through the ASA management interface. Other options are
possible, depending on how you want to connect your network; for example, you can make the
Management 1/0 interface outside facing; or you can route between it and a different ASA interface if
you have an inside router.
Deploy the ASA FirePOWER Module in Your Network, page 7-7
Access the ASA FirePOWER CLI, page 7-9
Configure ASA FirePOWER Basic Settings, page 7-9
ASA FirePOWER SSP
7 6 5 4
SFP1 SFP0
7 6 5 4
SFP1 SFP0
ASA FirePOWER Management 1/0
0
1
3 2 1 0 1 MGMT 0
USB
0
1
3 2 1 0 1 MGMT 0
USB
ASA Management 0/0
Default IP: 192.168.1.1
Cisco ASA Series Firewall CLI Configuration Guide
Perform Initial ASA FirePOWER Setup
RESET
AUX CONSOLE
RESET
AUX CONSOLE
7-7