Cisco Cisco Firepower 9300 Security Appliance Guide De Montage
Cisco Systems, Inc.
www.cisco.com
1
Cisco ASA for Firepower 9300
Quick Start Guide
Quick Start Guide
First Published:
July 16, 2015
Last Updated:
May 9, 2016
1. About the ASA for Firepower 9300
The Firepower 9300 security appliance can include up to three security modules running the ASA application.
In Firepower eXtensible Operating System (FXOS) 1.1.3 and later, you can create an inter-chassis cluster to
include up to six ASAs across multiple chassis.
include up to six ASAs across multiple chassis.
How the ASA Works with the Firepower 9300
The Firepower 9300 security appliance runs its own operating system on the supervisor called the Firepower
eXtensible Operating System (FXOS). You can configure hardware interface settings, smart licensing, and other
basic operating parameters on the supervisor using the Firepower Chassis Manager web interface or CLI.
eXtensible Operating System (FXOS). You can configure hardware interface settings, smart licensing, and other
basic operating parameters on the supervisor using the Firepower Chassis Manager web interface or CLI.
All physical interface operations are owned by the supervisor, including establishing external EtherChannels. You
can create two types of interfaces: Data and Management. Only Management interfaces can be shared across
modules. You can assign interfaces to the ASA either at the time of deployment or later as needed. These
interfaces use the same IDs in the supervisor as in the ASA configuration. The Firepower 9300 delivers network
traffic to the ASA over internal backplane EtherChannels.
can create two types of interfaces: Data and Management. Only Management interfaces can be shared across
modules. You can assign interfaces to the ASA either at the time of deployment or later as needed. These
interfaces use the same IDs in the supervisor as in the ASA configuration. The Firepower 9300 delivers network
traffic to the ASA over internal backplane EtherChannels.
When you deploy the ASA, the supervisor downloads an ASA image of your choice, and establishes a default
configuration. You can deploy the ASA as either a standalone logical device, or as a cluster of ASAs. When you
use clustering, all modules in the chassis must belong to the cluster. For FXOS 1.1.2 and earlier, only intra-chassis
clustering is supported. FXOS 1.1.3 supports inter-chassis clustering.
configuration. You can deploy the ASA as either a standalone logical device, or as a cluster of ASAs. When you
use clustering, all modules in the chassis must belong to the cluster. For FXOS 1.1.2 and earlier, only intra-chassis
clustering is supported. FXOS 1.1.3 supports inter-chassis clustering.
You must install the ASA software on all modules in the chassis; different software types are not supported at this
time.
time.
ASA Management
When you deploy the ASA, you can pre-configure a management interface and management client information,
so the deployed ASA allows ASDM access from that client.
so the deployed ASA allows ASDM access from that client.
You can also access the ASA CLI from the Firepower 9300 CLI using an internal Telnet connection. From within
the ASA, you can later configure SSH or Telnet access over any of its management or data interfaces.
the ASA, you can later configure SSH or Telnet access over any of its management or data interfaces.
Note:
See
for licensing
requirements for ASDM access.