ASA with FirePOWER Services

Network Deployment
 FirePOWER Network Access
FirePOWER module requires internal network
access for
Management traffic
Inspecting user traffic
FirePOWER module requires Internet access
for
Access to Cisco cloud

Copyright www.ine.com
 FirePOWER Internal Network Access
Management traffic is achieved via the physical
management interface of the ASA
System image install and updates
Communication with FireSIGHT/FirePOWER Management
Center
NTP, DNS
User traffic inspection is achieved through the
backplane
ASA redirects all or partial traffic to FirePOWER via MPF
Modular Policy Framework

Copyright www.ine.com
 FirePOWER Internet Access
Internet access is achieved via the physical
management interface of the ASA
Required in order to upload files to the cloud for
sandboxing

Copyright www.ine.com
 FirePOWER Network/Internet Access
Supported in both routed and transparent
Single-context or multiple-context
ASA 5506-X, 5508-X and 5516-X
Via Management1/1 interface
ASA 5512-X to ASA 5555-X
Via Management0/0 interface
ASA5585-X
Via Management1/0 or Management1/1 interface
Copyright www.ine.com
 Q&A

Copyright www.ine.com All rights reserved.