Configure The Device In Cdo - Cisco Firepower 1010 Getting Started Manual

Firepower Threat Defense Deployment with CDO

Configure the Device in CDO

The following steps provide an overview of additional features you might want to configure. Please click the
help button (?) on a page to get detailed information about each step.
Procedure
Step 1
Log in to the CDO portal, choose Devices & Services from the CDO menu, and then select the device you
just onboarded.
Step 2 Choose Management > Interfaces and select the physical interface you want to configure.
Step 3
Click the edit icon (
optionally, a Description.
Unless you configure subinterfaces, the interface should have a name.
Note
Step 4
Set the Type and define the IP address and other settings.
The following example configures an interface to be used as a "demilitarized zone" (DMZ), where you place
publicly-accessible assets such as your web server. Click Save when you are finished.
Figure 15: Edit Interface
Step 5 If you configured new interfaces, choose Management > Objects.
Edit or create a new Security Zone as appropriate. Each interface must belong to a zone, because you configure
policies based on security zones, not interfaces. You cannot put the interfaces in zones when configuring
them, so you must always edit the zone objects after creating new interfaces or changing the purpose of existing
interfaces.
The following example shows how to create a new dmz-zone for the dmz interface.
) for each interface you want to configure and give the interface a Logical Name and,
If you change the name, the change is automatically reflected everywhere you used the old name,
including security zones, syslog server objects, and DHCP server definitions. However, you cannot
remove the name until you first remove all configurations that use the name, because you typically
cannot use an unnamed interface for any policy or setting.
Configure the Device in CDO
Cisco Firepower 1010 Getting Started Guide
45