Cisco Cisco Firepower Management Center 2000
2
FireSIGHT System Release Notes
Version 5.3.1.7
Changed Functionality
•
Changed Functionality
There is no changed functionality in Version 5.3.1.7.
Features and Functionality Added in Previous Releases
For detailed information, see the FireSIGHT System User Guide, and the FireSIGHT System Installation
Guide.
Guide.
Management of Cisco ASA with FirePOWER Services
Version 5.3.1 introduces the ability to manage Cisco ASA with FirePOWER Services (ASA FirePOWER
devices) with the FireSIGHT Defense Center. Defense Centers running Version 5.3.1 can manage ASA
FirePOWER modules on the following ASA devices:
devices) with the FireSIGHT Defense Center. Defense Centers running Version 5.3.1 can manage ASA
FirePOWER modules on the following ASA devices:
•
ASA5512-X
•
ASA5515-X
•
ASA5525-X
•
ASA5545-X
•
ASA5555-X
•
ASA5585-X-SSP-10, ASA5585-X-SSP-20, ASA5585-X-SSP-40, and ASA5585-X-SSP-60
The ASA FirePOWER module must be running Version 5.3.1 to be managed by a Defense Center
running Version 5.3.1.1. ASA FirePOWER modules can only be installed on the above platforms
running Version 9.2.2 or later of the ASA software.
running Version 5.3.1.1. ASA FirePOWER modules can only be installed on the above platforms
running Version 9.2.2 or later of the ASA software.
Feature Limitations of Cisco ASA with FirePOWER Services
When you use a Defense Center to manage Cisco ASA with FirePOWER Services devices, the ASA
FirePOWER module provides the first-line system policy and passes traffic to the FireSIGHT System
for access control, intrusion detection and prevention, discovery, and advanced malware protection.
FirePOWER module provides the first-line system policy and passes traffic to the FireSIGHT System
for access control, intrusion detection and prevention, discovery, and advanced malware protection.
Regardless of the licenses installed and applied, ASA FirePOWER devices do not support any of the
following features through the FireSIGHT System:
following features through the FireSIGHT System:
•
ASA FirePOWER devices do not support the FireSIGHT System’s hardware-based features,
including clustering, stacking, switching, routing, virtual private networks (VPN), and network
address translation (NAT).
including clustering, stacking, switching, routing, virtual private networks (VPN), and network
address translation (NAT).
Note
The ASA platform provides these features, configured using the ASA command line interface (CLI) and
Adaptive Security Device Manager (ASDM). For more information, see the ASA FirePOWER module
documentation.
Adaptive Security Device Manager (ASDM). For more information, see the ASA FirePOWER module
documentation.
•
You cannot use the Defense Center web interface to configure ASA FirePOWER interfaces.