Cisco Cisco ASA 5555-X Adaptive Security Appliance 产品宣传页

예를 들면 다음과 같습니다.

System initialization in progress.  Please stand by.  

You must change the password for 'admin' to continue.

Enter new password: <new password> 

Confirm new password: <repeat password> 

You must configure the network to continue.

You must configure at least one of IPv4 or IPv6.

Do you want to configure IPv4? (y/n) [y]: y 

Do you want to configure IPv6? (y/n) [n]: 

Configure IPv4 via DHCP or manually? (dhcp/manual) [manual]: 

Enter an IPv4 address for the management interface [192.168.45.45]: 10.86.118.3 

Enter an IPv4 netmask for the management interface [255.255.255.0]: 255.255.252.0 

Enter the IPv4 default gateway for the management interface []: 10.86.116.1 

Enter a fully qualified hostname for this system [Sourcefire3D]: asasfr.example.com 

Enter a comma-separated list of DNS servers or 'none' []: 10.100.10.15, 

Enter a comma-separated list of search domains or 'none' [example.net]: example.com 

If your networking information has changed, you will need to reconnect.

For HTTP Proxy configuration, run 'configure network http-proxy'

This sensor must be managed by a Defense Center.  A unique alphanumeric

registration key is always required.  In most cases, to register a sensor

to a Defense Center, you must provide the hostname or the IP address along

with the registration key.

'configure manager add [hostname | ip address ] [registration key ]'

However, if the sensor and the Defense Center are separated by a NAT device,

you must enter a unique NAT ID, along with the unique registration key.

'configure manager add DONTRESOLVE [registration key ] [ NAT ID ]'

Later, using the web interface on the Defense Center, you must use the same

registration key and, if necessary, the same NAT ID when you add this

sensor to the Defense Center.

4단계

이제 이 디바이스를 관리할 FireSIGHT Management Center를 식별해야 합니다(

의 설명 참조).

8  

FireSIGHT Management Center에 ASA FirePOWER추가

FireSIGHT Management Center(Defense Center라고도 함)는 별도의 서버로서 동일한 모델 또는 서로 다른 모델의 여러 
FirePOWER 디바이스를 관리합니다. FireSIGHT Management Center는 대규모 구축 환경을 관리하는 데 적합합니다. 여러 디
바이스 간에 구성의 일관성을 유지하고 효율적인 트래픽 분석을 지원합니다. 

ASA 5512-X부터 5585-X까지는 FireSIGHT Management Center에 모듈을 등록해야 합니다. 다른 방법으로는 모듈을 구성할 수 
없습니다.

FireSIGHT Management Center에 디바이스를 등록하려면 configure manager add 명령을 사용합니다. FireSIGHT Management 
Center에 디바이스를 등록하려면 반드시 고유한 영숫자 등록 키가 필요합니다. 이는 사용자가 지정하는 간단한 키이며, 라이센
스 키와 다릅니다.
대개의 경우, 다음과 같이 FireSIGHT Management Center의 호스트 이름 또는 IP 주소를 등록 키와 함께 사용합니다.

configure manager add DC.example.com my_reg_key 

그러나 디바이스와 FireSIGHT Management Center 사이에 NAT 디바이스가 있을 경우, 다음과 같이 고유한 NAT  ID를 등록 키
와 함께 입력하고 호스트 이름 대신 DONTRESOLVE를 지정합니다.

configure manager add DONTRESOLVE my_reg_key my_nat_id

1단계

다음 중 하나를 수행합니다.

(모든 모듈) SSH를 사용하여 ASA FirePOWER 관리 IP 주소에 연결합니다.