Onboard The Device To Cdo - Cisco Firepower 1010 Getting Started Manual

Firepower Threat Defense Deployment with CDO

Onboard the Device to CDO

Before you onboard a device, make sure that you complete the FDM installation wizard. Then use CDO's
onboarding wizard to onboard your device and license the device.
You can onboard a device in one of two ways:
• With a registration key (recommended).
• With device credentials (username and password) and an IP address.
Attention We recommend using the evaluation license until you onboard the device. Any additional licenses you register
with the Smart Software Manager will have to be unregistered before you can onboard to CDO, and then
registered again; see
Onboard With a Registration Key (Recommended)
You can onboard your devices with a registration key. We recommend this method especially if your device
uses DHCP to obtain its IP address. If that IP address changes your device remains connected to CDO.
Onboard With Credentials and IP Address
You can onboard an FTD using the device's administrator username and password, and the IP address of the
device's outside, inside, or management interface depending on how the device is configured in your network;
see the network configuration and deployment details for your device.
CDO needs HTTPS access to the device in order to manage it. How you allow HTTPS access to the device
depends on how your FTD is configured in your network, and whether your
is installed on-premise or in the cloud.
Important If you connect to
and IP address. You cannot use a registration key to onboard the FTD device.
Using a cloud SDC allows management access to the device's outside interface. Using an on-premise SDC
allows management access to the device using the inside or management interface. Note that when using the
FTD as the head-end for VPN connections, you will not be able to use the outside interface to manage the
device.
See Connect Cisco Defense Orchestrator to the Secure Device Connector
connect CDO to your SDC and what network access needs to be allowed.
Onboard an FTD with a Registration Key (Version 6.4 or 6.5)
Follow this procedure to onboard an FTD device using a registration key.
Before you begin
• (Version 6.4) This method is only supported for the US region (defenseorchestrator.com).
Configure Licensing, on page
https://www.defenseorchestrator.eu
72.
Secure Device Connector (SDC)
you must onboard your device using username, password,
for more information about how to
Cisco Firepower 1010 Getting Started Guide
Onboard the Device to CDO
41