Cisco ASA 5506-X Configuration Manual page 348

Configure the ASA FirePOWER Module
Configure the Security Policy on the ASA FirePOWER Module, page
Step 6
Redirect Traffic to the ASA FirePOWER Module, page
Step 7
Connect the ASA FirePOWER Management Interface
In addition to providing management access to the ASA FirePOWER module, the ASA FirePOWER
management interface needs access to an HTTP proxy server or a DNS server and the Internet for
signature updates and more. This section describes recommended network configurations. Your network
may differ.
ASA 5585-X (Hardware Module)
The ASA FirePOWER module includes a separate management and console interface from the ASA. For
initial setup, you can connect with SSH to the ASA FirePOWER Management 1/0 interface using the
default IP address. If you cannot use the default IP address, you can either use the console port or use
ASDM to change the management IP address so you can use SSH. (See
Management IP Address, page
ASA 5585-X
SSP
If you have an inside router
If you have an inside router, you can route between the management network, which can include both
the ASA Management 0/0 and ASA FirePOWER Management 1/0 interfaces, and the ASA inside
network for Internet access. Be sure to also add a route on the ASA to reach the Management network
through the inside router.
Cisco ASA Series Firewall CLI Configuration Guide
16-8
16-14.)
ASA FirePOWER SSP
SFP1 SFP0 7 6 5 4 3 2 1 0
7 6 5 4 3 2 1 0
SFP1 SFP0
16-19.
ASA FirePOWER Management 1/0
0
1
1 MGMT 0
USB
AUX
0
1
1 MGMT 0
USB
AUX
ASA Management 0/0
Default IP: 192.168.1.1
Chapter 16 ASA FirePOWER (SFR) Module
16-17.
Change the ASA FirePOWER
RESET
CONSOLE
RESET
CONSOLE