Configure Cisco ASA Firepower Services for the first time


Before you proceed with configuration, ensure that Source FirePower (SFR) service is up and running on your ASA

ASA# sh module

Mod Card Type Model Serial No.
—- ——————————————– —————— ———–
1 ASA 5506-X with SW, 8GE Data, 1GE Mgmt, AC ASA5506 JAD101600GX
sfr FirePOWER Services Software Module ASA5506 JAD101600GX

Mod MAC Address Range Hw Version Fw Version Sw Version
—- ——————————— ———— ———— —————
1 00f6.6347.9bb7 to 00f6.6347.9bc0 1.1 1.1.8 9.6(1)
sfr 00f6.6347.9bb6 to 00f6.6347.9bb6 N/A N/A 6.0.0-1005

Mod SSM Application Name Status SSM Application Version
—- —————————— —————- ————————–
sfr ASA FirePOWER Up 6.0.0-1005

Mod Status Data Plane Status Compatibility
—- —————— ——————— ————-
1 Up Sys Not Applicable
sfr Up Up

SSH to Cisco ASA firewall and open a console session to the now-running ASA FirePOWER boot image as follows. The default credential of firepower services  is admin / Admin123

ASA#session sfr console

Login: admin
Password: Admin123


Welcome to Cisco FirePOWER Services Setup
[hit Ctrl-C to abort]
Default values are inside []

Enter a hostname [asasfr]: asasfr
Do you want to configure IPv4 address on management interface?(y/n) [Y]: y
Do you want to enable DHCP for IPv4 address assignment on management interface?(y/n) [N]: n
Enter an IPv4 address []:
Enter the netmask []:
Enter the gateway []:
Do you want to configure static IPv6 address on management interface?(y/n) [N]: n
Stateless autoconfiguration will be enabled for IPv6 addresses.
Enter the primary DNS server IP address:
Do you want to configure Secondary DNS Server? (y/n) [n]: n
Do you want to configure Local Domain Name? (y/n) [n]: y
Enter the local domain name:
Do you want to configure Search domains? (y/n) [n]: n
Do you want to enable the NTP service? [Y]: n
Please review the final configuration:
Hostname: asasfr
Management Interface Configuration

IPv4 Configuration:         static
                  IP Address:

IPv6 Configuration: Stateless autoconfiguration

DNS Configuration:
                  DNS Server:

NTP configuration: Disabled

You have selected IPv6 stateless autoconfiguration, which assigns a global address based on network prefix and a device identifier. Although this address is unlikely to change, if it does change, the system will stop functioning correctly.
We suggest you use static addressing instead.

Apply the changes?(y,n) [Y]: y
Configuration saved successfully!
Restarting network services…
Press ENTER to continue…


Related Articles & Comments

Menu Title
%d bloggers like this: