Cisco FPR1010-ASA-K9 Getting Started Manual page 5

Which Operating System and Manager is Right for You?
Manager
Cisco Defense Orchestrator (CDO)
Secure Firewall Threat Defense REST API
Secure Firewall Management Center REST
API
ASA Managers
Table 2: ASA Managers
Manager
Adaptive Security Device Manager
(ASDM)
CLI
Description
CDO offers two management modes:
• (7.2 and later) Cloud-delivered management center mode with all of the
configuration functionality of an on-premises management center. For the analytics
functionality, you can use either Secure Cloud Analytics in the cloud or an on-prem
management center.
• (Existing CDO users only) Device manager mode with a simplified user experience.
This mode is only available to users who are already using CDO to manage threat
defenses in device manager mode. This mode is not covered in this guide.
Because CDO is cloud-based, there is no overhead of running CDO on your own servers.
CDO also manages other security devices, such as ASAs, so you can use a single manager
for all of your security devices.
To get started with CDO provisioning, see
page 117.
The threat defense REST API lets you automate direct configuration of the threat defense.
This API is compatible with the device manager and CDO use because they can both
discover the configuration on the firewall. You cannot use this API if you are managing
the threat defense using the management center.
The threat defense REST API is not covered in this guide. For more information, see
the Cisco Secure Firewall Threat Defense REST API
The management center REST API lets you automate configuration of management
center policies that can then be applied to managed threat defenses. This API does not
manage the threat defense directly.
The management center REST API is not covered in this guide. For more information,
see the Secure Firewall Management Center REST API Quick Start
Description
ASDM is a Java-based, on-device manager that provides full ASA functionality. You
should use ASDM if you prefer using a GUI over the CLI, and you only need to manage
a small number of ASAs. ASDM can discover the configuration on the firewall, so you
can also use the CLI, CDO, or CSM with ASDM.
To get started with ASDM, see
You should use the ASA CLI if you prefer CLIs over GUIs.
The CLI is not covered in this guide. For more information, see the
guides.
Threat Defense Deployment with CDO, on
Guide.
ASA Deployment with ASDM, on page
Cisco Firepower 1010 Getting Started Guide
ASA Managers
Guide.
167.
ASA configuration
3