Cisco Cisco Firepower 9300 Security Appliance 설치 가이드
Cisco Systems, Inc.
www.cisco.com
1
Radware DefensePro Service Chain for
Firepower 9300 Quick Start Guide
Firepower 9300 Quick Start Guide
First Published:
January 27, 2016
Last Updated:
August 10, 2016
1. About Radware DefensePro Service Chaining on the
Firepower 9300
Firepower 9300
The Cisco FXOS chassis can support multiple services (for example, an ASA firewall, and a third-party DDoS
application) on a single blade. These applications can be linked together to form a Service Chain. In Firepower
eXtensible Operating System (FXOS) 1.1.4 and later on the Firepower 9300, the third-party Radware DefensePro
virtual platform can be installed to run in front of the ASA firewall. Radware DefensePro is a KVM-based virtual
platform that provides distributed denial-of-service (DDoS) detection and mitigation capabilities on the FXOS
chassis. When Service Chaining is enabled on your FXOS chassis, ingress traffic from the network must first pass
through the DefensePro virtual platform before reaching the ASA firewall.
application) on a single blade. These applications can be linked together to form a Service Chain. In Firepower
eXtensible Operating System (FXOS) 1.1.4 and later on the Firepower 9300, the third-party Radware DefensePro
virtual platform can be installed to run in front of the ASA firewall. Radware DefensePro is a KVM-based virtual
platform that provides distributed denial-of-service (DDoS) detection and mitigation capabilities on the FXOS
chassis. When Service Chaining is enabled on your FXOS chassis, ingress traffic from the network must first pass
through the DefensePro virtual platform before reaching the ASA firewall.
Note:
The Radware DefensePro service chain can be enabled in a standalone configuration, or in an intra-chassis
clustered configuration with the ASA firewall.
clustered configuration with the ASA firewall.
The DefensePro application can run as separate instances on up to three security modules.
The Radware DefensePro virtual platform may be referred to as Radware vDP (virtual DefensePro), or simply
vDP.
vDP.
The Radware DefensePro application may occasionally be referred to as a Link Decorator for the ASA firewall.
Licensing Requirements for the Radware DefensePro Service Chain on
the Firepower 9300
the Firepower 9300
Licensing for the Radware Virtual DefensePro application on the Firepower 9300 is handled through the Radware
APSolute Vision Manager. Go to the Cisco Commerce Workspace (CCW) to order a throughput license for your
device. After submitting this request, you will receive a login and link to the Radware Portal, where you can then
request a license.
APSolute Vision Manager. Go to the Cisco Commerce Workspace (CCW) to order a throughput license for your
device. After submitting this request, you will receive a login and link to the Radware Portal, where you can then
request a license.
For more information and documentation on Radware’s APSolute Vision Manager and throughput licensing
requirements, see the documentation on Radware’s site
(
requirements, see the documentation on Radware’s site
(
). Note that you must be registered with Radware to access this portal.