Cisco Cisco Firepower Management Center 2000

This section of the release notes summarizes the new and updated features and functionality included in 
Version 5.3.1 of the FireSIGHT System: 

For detailed information, see the FireSIGHT System User Guide, FireSIGHT System Installation Guide, 
and FireSIGHT System Virtual Installation Guide.

Version 5.3.1 introduces the ability to manage Cisco ASA with FirePOWER Services (ASA  FirePOWER 
devices) with the FireSIGHT Defense Center. Defense Centers running Version 5.3.1 can manage ASA 
FirePOWER modules on the following ASA devices:

ASA5512-X

ASA5515-X

ASA5525-X

ASA5545-X

ASA5555-X

ASA5585-X-SSP-10, ASA5585-X-SSP-20, ASA5585-X-SSP-40, and ASA5585-X-SSP-60

The ASA FirePOWER module must be running Version 5.3.1 to be managed by a Defense Center 
running Version 5.3.1. ASA FirePOWER modules can only be installed on the above platforms running 
Version 9.2.2 or later of the ASA software.

When you use a Defense Center to manage Cisco ASA with FirePOWER Services devices, the ASA 
FirePOWER module provides the first-line system policy and passes traffic to the FireSIGHT System 
for access control, intrusion detection and prevention, discovery, and advanced malware protection.

Regardless of the licenses installed and applied, ASA FirePOWER devices do not support any of the 
following features through the FireSIGHT System:

ASA FirePOWER devices do not support the FireSIGHT System’s hardware-based features, 
including clustering, stacking, switching, routing, virtual private networks (VPN), and network 
address translation (NAT). 

The ASA platform provides these features, configured using the ASA command line interface (CLI) and 
Adaptive Security Device Manager (ASDM). For more information, see the ASA FirePOWER module 
documentation.

You cannot use the Defense Center web interface to configure ASA FirePOWER interfaces.

You cannot use the Defense Center to shut down, restart, or otherwise manage ASA FirePOWER 
processes.