Cisco ASA 5506-X Configuration Manual page 341

ASA FirePOWER (SFR) Module
This chapter describes how to configure the ASA FirePOWER module that runs on the ASA.
•
•
•
•
•
•
•
•
•
The ASA FirePOWER Module
The ASA FirePOWER module supplies next-generation firewall services, including Next-Generation
Intrusion Prevention System (NGIPS), Application Visibility and Control (AVC), URL filtering, and
Advanced Malware Protection (AMP).You can use the module in single or multiple context mode, and
in routed or transparent mode.
The module is also known as ASA SFR.
Although the module has a basic command line interface (CLI) for initial configuration and
troubleshooting, you configure the security policy on the device using a separate application, FireSIGHT
Management Center, which can be hosted on a separate FireSIGHT Management Center appliance or as
a virtual appliance running on a VMware server. (FireSIGHT Management Center is also known as
Defense Center.)
For ASA FirePOWER running on ASA 5506-X devices, you can optionally configure the device using
ASDM rather than FireSIGHT Management Center.
•
•
•
The ASA FirePOWER Module, page 16-1
Licensing Requirements for the ASA FirePOWER Module, page 16-6
Guidelines for ASA FirePOWER, page 16-6
Defaults for ASA FirePOWER, page 16-7
Configure the ASA FirePOWER Module, page 16-7
Managing the ASA FirePOWER Module, page 16-22
Monitoring the ASA FirePOWER Module, page 16-26
Examples for the ASA FirePOWER Module, page 16-29
History for the ASA FirePOWER Module, page 16-30
How the ASA FirePOWER Module Works with the ASA, page 16-2
ASA FirePOWER Management Access, page 16-5
Compatibility with ASA Features, page 16-6
C H A P T E R
Cisco ASA Series Firewall CLI Configuration Guide
16
16-1