Cisco Firepower 1010 Getting Started Manual page 59

Firepower Threat Defense Deployment with CDO
The following example shows how to allow traffic between the inside-zone and dmz-zone in the access control
policy. In this example, no options are set on any of the other tabs except for Logging, where At End of
Connection is selected.
Figure 26: Access Control Policy
Step 9
Locate the Security Database Updates section to create a scheduled task to check and update the security
databases for an FTD device.
When you onboard an FTD device to CDO, part of the onboarding process allows you to Enable scheduled
recurring updates for databases. This option is checked by default. When enabled, CDO immediately checks
for and applies any security updates as well as automatically schedules the device to check for additional
updates. You are able to modify the date and time of the scheduled task after the device is onboarded.
If you are using intrusion policies, set up regular updates for the Rules and VDB databases. If you use Security
Intelligence feeds, set an update schedule for them. If you use geolocation in any security policies as matching
criteria, set an update schedule for that database.
Step 10 Click the Preview and Deploy button in the menu, then click the Deploy Now button, to deploy your changes
to the device.
Changes are not active on the device until you deploy them.
Access the FTD and FXOS CLI
Use the command-line interface (CLI) to set up the system and do basic system troubleshooting. You cannot
configure policies through a CLI session. You can access the CLI by connecting to the console port.
You can also access the FXOS CLI for troubleshooting purposes.
Note You can alternatively SSH to the Management interface of the FTD device. Unlike a console session, the SSH
session defaults to the FTD CLI, from which you can connect to the FXOS CLI using the connect fxos
command. You can later connect to the address on a data interface if you open the interface for SSH connections.
SSH access to data interfaces is disabled by default. This procedure describes console port access, which
defaults to the FXOS CLI.
All manuals and user guides at all-guides.com
You also apply intrusion and file (malware) policies using access control rules. Use this policy to
implement URL filtering.
Access the FTD and FXOS CLI
Cisco Firepower 1010 Getting Started Guide
57