Cisco ASA 5506-X 빠른 시작 매뉴얼 - 페이지 8

{카테고리_이름} Cisco ASA 5506-X에 대한 빠른 시작 매뉴얼을 온라인으로 검색하거나 PDF를 다운로드하세요. Cisco ASA 5506-X 14 페이지. Threat defense reimage guide
Cisco ASA 5506-X에 대해서도 마찬가지입니다: 빠른 시작 매뉴얼 (10 페이지), 간편한 설정 매뉴얼 (11 페이지), 소프트웨어 설명서 (37 페이지), 마운트 및 연결 (12 페이지), 설치 매뉴얼 (46 페이지), 섀시 마운트 (10 페이지), 하드웨어 설치 매뉴얼 (26 페이지)

페이지 인쇄

Cisco Firepower Threat Defense for the ASA 5506-X Series Using Firepower Device Manager Quick Start Guide

Before You Begin

Ensure that you connect a data interface to your gateway device, for example, a cable modem or router. For edge

deployments, this would be your Internet-facing gateway. For data center deployments, this would be a

back-bone router. Use the default "outside" interface identified in

Network, page

Then, connect your management computer to one of the other data ports, which are part of the inside bridge

group. Alternatively, you can connect to the Management physical interface.

The Management physical interface does not need to be connected to a network. By default, the system obtains

system licensing and database and other updates through the data interfaces, typically the outside interface, that

connect to the Internet. If you instead want to use a separate management network, you can connect the

Management interface to a network and configure a separate management gateway after you complete initial

setup.

Procedure

Open a browser and log into Firepower Device Manager. Assuming you did not go through initial configuration

in the CLI, open Firepower Device Manager at https://ip-address, where the address is one of the following:

—

(Version 6.2 and greater) If you are connected to an inside bridge group interface: https://192.168.1.1.

—

(Version 6.1) If you are connected to the Management physical interface: https://192.168.45.45.

If this is the first time logging into the system, and you did not use the CLI setup wizard, you are prompted to

read and accept the End User License Agreement and change the admin password. You must complete these

steps to continue.

Configure the following options for the outside and management interfaces and click Next.

Note:

Your settings are deployed to the device when you click Next. The interface will be named "outside"

and it will be added to the "outside_zone" security zone. Ensure that your settings are correct.

Outside Interface—This is the data port that you connected to your gateway mode or router. You cannot

select an alternative outside interface during initial device setup. The first data interface is the default

outside interface.

Configure IPv4—The IPv4 address for the outside interface. You can use DHCP or manually enter a static

IP address, subnet mask, and gateway. You can also select Off to not configure an IPv4 address.

Configure IPv6—The IPv6 address for the outside interface. You can use DHCP or manually enter a static

IP address, prefix, and gateway. You can also select Off to not configure an IPv6 address.

Management Interface

DNS Servers—The DNS server for the system's management address. Enter one or more addresses of DNS

servers for name resolution. The default is the OpenDNS public DNS servers. If you edit the fields and want

to return to the default, click Use OpenDNS to reload the appropriate IP addresses into the fields.

Firewall Hostname—The hostname for the system's management address.

Note:

When you configure the Firepower Threat Defense device using the device setup wizard, the system

provides two default access rules for outbound and inbound traffic. You can go back and edit these access

rules after initial setup.

Configure the system time settings and click Next.

Time Zone—Select the time zone for the system.

NTP Time Server—Select whether to use the default NTP servers or to manually enter the addresses of

your NTP servers. You can add multiple servers to provide backups.

6. Launch Firepower Device Manager

4. Deploy the Firepower Threat Defense in Your