Cisco Firepower 1010 Getting Started Manual page 93

Firepower Threat Defense Deployment with FMC
Review the Network Deployment
Figure 37: Suggested Network Deployment
6.4 Deployment
The dedicated Management 1/1 interface is a special interface with its own network settings. By default, only
the Management 1/1 interface is enabled and configured with an IP address (192.168.45.45). This interface
also runs a DHCP server initially; after you select FMC as the manager during initial setup, the DHCP server
is disabled. You can configure other interfaces after you connect the FTD to FMC.
The following figure shows the recommended network deployment for the Firepower 1010.
The FMC can only communicate with the FTD on the Management interface. Moreover, both the FMC and
FTD require internet access from management for licensing and updates.
In the following diagram, the Firepower 1010 acts as the internet gateway for the Management interface and
the FMC by connecting Management 1/1 to an inside interface through a Layer 2 switch, and by connecting
the FMC and management computer to the switch. (This direct connection is allowed because the Management
interface is separate from the other interfaces on the FTD.)
Cisco Firepower 1010 Getting Started Guide
91