Configure Cisco ASA Firepower Services for the first time

Before you proceed with configuration, ensure that Source FirePower (SFR) service is up and running on your ASA

ASA# sh module

Mod Card Type Model Serial No.
—- ——————————————– —————— ———–
1 ASA 5506-X with SW, 8GE Data, 1GE Mgmt, AC ASA5506 JAD101600GX
sfr FirePOWER Services Software Module ASA5506 JAD101600GX

Mod MAC Address Range Hw Version Fw Version Sw Version
—- ——————————— ———— ———— —————
1 00f6.6347.9bb7 to 00f6.6347.9bc0 1.1 1.1.8 9.6(1)
sfr 00f6.6347.9bb6 to 00f6.6347.9bb6 N/A N/A 6.0.0-1005

Mod SSM Application Name Status SSM Application Version
—- —————————— —————- ————————–
sfr ASA FirePOWER Up 6.0.0-1005

Mod Status Data Plane Status Compatibility
—- —————— ——————— ————-
1 Up Sys Not Applicable
sfr Up Up

SSH to Cisco ASA firewall and open a console session to the now-running ASA FirePOWER boot image as follows. The default credential of firepower services  is admin / Admin123

ASA#session sfr console

Login: admin
Password: Admin123

asasfr-boot>setup

Welcome to Cisco FirePOWER Services Setup
[hit Ctrl-C to abort]
Default values are inside []

Enter a hostname [asasfr]: asasfr
Do you want to configure IPv4 address on management interface?(y/n) [Y]: y
Do you want to enable DHCP for IPv4 address assignment on management interface?(y/n) [N]: n
Enter an IPv4 address [192.168.8.8]: 192.168.1.5
Enter the netmask [255.255.255.0]: 255.255.255.0
Enter the gateway [192.168.8.1]: 192.168.1.1
Do you want to configure static IPv6 address on management interface?(y/n) [N]: n
Stateless autoconfiguration will be enabled for IPv6 addresses.
Enter the primary DNS server IP address: 8.8.8.8
Do you want to configure Secondary DNS Server? (y/n) [n]: n
Do you want to configure Local Domain Name? (y/n) [n]: y
Enter the local domain name: itadminguide.com
Do you want to configure Search domains? (y/n) [n]: n
Do you want to enable the NTP service? [Y]: n
Please review the final configuration:
Hostname: asasfr
Management Interface Configuration

IPv4 Configuration:         static
                  IP Address:         192.168.1.5
                  Netmask:             255.255.255.0
                  Gateway:             192.168.1.1

IPv6 Configuration: Stateless autoconfiguration

DNS Configuration:
                  Domain:               itadminguide.com
                  DNS Server:
                                                    8.8.8.8

NTP configuration: Disabled

CAUTION:
You have selected IPv6 stateless autoconfiguration, which assigns a global address based on network prefix and a device identifier. Although this address is unlikely to change, if it does change, the system will stop functioning correctly.
We suggest you use static addressing instead.

Apply the changes?(y,n) [Y]: y
Configuration saved successfully!
Applying…
Restarting network services…
Done.
Press ENTER to continue…

You may also like...

Thank you for visiting us. To continue receiving updates, please Subscribe to our Social Media Channels.

Menu Title