Onboard The Device To Cdo - Cisco Firepower 2100 Getting Started Manual

Firepower Threat Defense Deployment with CDO

Onboard the Device to CDO

Before you onboard a device, make sure that you complete the FDM installation wizard. Then use CDO's
onboarding wizard to onboard your device and license the device.
You can onboard a device in one of two ways:
• With a registration key (recommended).
• With device credentials (username and password) and an IP address.
Attention We recommend using the evaluation license until you onboard the device. Any additional licenses you register
with the Smart Software Manager will have to be unregistered before you can onboard to CDO, and then
registered again; see
Onboard With a Registration Key (Recommended)
You can onboard your devices with a registration key. We recommend this method especially if your device
uses DHCP to obtain its IP address. If that IP address changes your device remains connected to CDO.
Alternately, you can onboard your device using credentials (username and password) and an IP address.
Onboard With Credentials and IP Address
You can onboard an FTD using the device's administrator username and password, and the IP address of the
device's outside, inside, or management interface depending on how the device is configured in your network;
see #unique_22
CDO needs HTTPS access to the device in order to manage it. How you allow HTTPS access to the device
depends on how your FTD is configured in your network, and whether your
is installed on-premise or in the cloud.
Important If you connect to
and IP address. You cannot use a registration key to onboard the FTD device.
Using a cloud SDC allows management access to the device's outside interface. Using an on-premise SDC
allows management access to the device using the inside or management interface. Note that when using the
FTD as the head-end for VPN connections, you will not be able to use the outside interface to manage the
device.
See Connect Cisco Defense Orchestrator to the Secure Device Connector
connect CDO to your SDC and what network access needs to be allowed.
Onboard an FTD with a Registration Key (Recommended)
Follow this procedure to onboard an FTD device using a registration key.
Configure Licensing, on page
unique_22_Connect_42_section_zlg_sjh_rlb.
https://www.defenseorchestrator.eu
50.
Secure Device Connector (SDC)
you must onboard your device using username, password,
for more information about how to
Cisco Firepower 2100 Getting Started Guide
Onboard the Device to CDO
21