Cisco Firepower NGFW

Data Sheets and Product Information

Data Sheets

• Cisco Firepower Appliances Next - Generation Firewall Data Sheet

End-of-Life and End-of-Sale Notices

• English

  • End-of-Sale and End-of-Life Announcement for the Cisco Firepower 4120/40/50 and FPR 9300 SM24/36/44 Series Security Appliances/Modules & 5 YR Subscriptions
  • End-of-Sale and End-of-Life Announcement for the Cisco Firepower Threat Defense versions 6.1, NGIPSv and NGFWv versions 6.1, Firepower Management Center 6.1 and Firepower eXtensible Operating System (FXOS) 2.0(x)
  • End-of-Sale and End-of-Life Announcement for the Cisco Firepower Threat Defense (FTD) 6.2.2, 6.3(x), Firepower eXtensible Operating System (FXOS) 2.4.1 and Firepower Management Center (FMC) 6.2.2 and 6.3(x)
  • Cisco Firepower User Agent Product Bulletin
  • End-of-Sale and End-of-Life Announcement for the Cisco Firepower Threat Defense
  • Annonce d’arrêt de commercialisation et de fin de vie de Cisco Firepower 4120/40/50 and FPR 9300 SM24/36/44 Series Security Appliances/Modules & 5 YR Subscriptions
  • Annonce d’arrêt de commercialisation et de fin de vie de Cisco Firepower Threat Defense (FTD) 6.2.2, 6.3(x), Firepower eXtensible Operating System (FXOS) 2.4.1 and Firepower Management Center (FMC) 6.2.2 and 6.3(x)
  • Annonce d’arrêt de commercialisation et de fin de vie de Cisco Firepower Threat Defense versions 6.2.0 and 6.2.1

Q&A

• How To Compare NAP Policies on Firepower Devices
• What are the Metrics Used to Determine the Default Ruleset for each Firepower Intrusion Base Policy

Security Notices

Security Advisories, Responses and Notices

• Cisco FTD, FMC, and FXOS Software Pluggable Authentication Module Denial of Service Vulnerability
• Cisco FXOS Software CLI Arbitrary File Read and Write Vulnerability
• Cisco FXOS Software CLI Command Injection Vulnerability
• Cisco FXOS Software and Firepower Threat Defense Software Command Injection Vulnerabilities
• Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities
• Cisco FXOS and NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability
• Cisco FXOS and NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1611)
• Cisco FXOS and NX-OS Software Cisco Discovery Protocol Arbitrary Code Execution and Denial of Service Vulnerability
• Cisco FXOS and NX-OS Software Cisco Fabric Services Arbitrary Code Execution Vulnerability
• Cisco FXOS and NX-OS Software Cisco Fabric Services Arbitrary Code Execution Vulnerability
• Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability
• Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability
• Cisco FXOS and NX-OS Software Command Injection Vulnerabilities (CVE-2019-1781, CVE-2019-1782)
• Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1795)
• Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1780)

Release and Compatibility

Compatibility Information

• Cisco Firepower 4100/9300 FXOS Compatibility
• Cisco Firepower Compatibility Guide

Release Notes

• Firepower Hotfixes

  • Cisco Firepower Hotfix Release Notes

• Version 6.6.x

  • Cisco Firepower Release Notes, Version 6.6.0

• Version 6.5.x

  • Cisco Firepower Release Notes, Version 6.5.0.2 and 6.5.0.3
  • Cisco Firepower Release Notes, Version 6.5.0

• Version 6.4.x

  • Cisco Firepower Release Notes, Version 6.4.0.1, 6.4.0.2, 6.4.0.3, 6.4.0.4, 6.4.0.5, 6.4.0.7, and 6.4.0.8
  • Cisco Firepower Release Notes, Version 6.4.0

• Version 6.3.x

  • Cisco Firepower Release Notes, Version 6.3.0.1, 6.3.0.2, 6.3.0.3, 6.3.0.4, and 6.3.0.5
  • Cisco Firepower Release Notes, Version 6.3.0

• Version 6.2.x

  • Cisco Firepower Release Notes, Version 6.2.3.1, 6.2.3.2, 6.2.3.3, 6.2.3.4, 6.2.3.5, 6.2.3.6, 6.2.3.7, 6.2.3.9, 6.2.3.10, 6.2.3.11, 6.2.3.12, 6.2.3.13, 6.2.3.14, and 6.2.3.15
  • Cisco Firepower Release Notes, Version 6.2.3
  • Firepower Release Notes, Version 6.2.2
  • Firepower Release Notes, Version 6.2.2.1, Version 6.2.2.2, Version 6.2.2.3, Version 6.2.2.4, and Version 6.2.2.5
  • Firepower Release Notes Version 6.2.0.1, Version 6.2.0.2, Version 6.2.0.3, Version 6.2.0.4, and Version 6.2.0.5
  • Firepower Release Notes, Version 6.2.1
  • Firepower System Release Notes, Version 6.2.0

Reference

Command References

• Firepower Threat Defense

  • Cisco Firepower Threat Defense Command Reference

• Translations

  • Firepower Threat Defense용 명령 참조

Documentation Roadmaps

• Navigating the Cisco Firepower Documentation

Licensing Information

• Feature Licenses

  • Cisco Firepower System Feature Licenses
  • Frequently Asked Questions (FAQ) about Firepower Licensing
  • Firepower Management Center users: See also the "Licensing the Firepower System" chapter in the configuration guide for your release.

• Open Source Licenses

  • Open Source Licensing Information for Releases 6.4 and Later
  • Open Source Used In Cisco Firepower Version 6.3
  • Open Source Used In Cisco Firepower Version 6.2.3
  • Open Source Used In Cisco Firepower Version 6.2.2
  • Open Source Used in Firepower System Version 6.2.1
  • Open Source Used In Firepower System Version 6.2
  • Open Source Used In Firepower System Version 6.1
  • Open Source Used In Firepower System Version 6.0.1
  • Open Source Firepower Migration Tool v1.2.0

Technical References

• Cisco Firepower 2100 FXOS MIB Reference Guide

Design

Design Guides

• AnyConnect VPN, ASA, and FTD FAQ for Secure Remote Workers

Install and Upgrade

Install and Upgrade Guides

• Firepower 1010

  • Cisco Firepower 1010 Getting Started Guide

• Firepower 1100

  • Cisco Firepower 1100 Series Getting Started Guide

• Firepower 2100

  • Cisco Firepower 2100 Getting Started Guide
  • Cisco Firepower 2100 Series Hardware Installation Guide

• Firepower 4100

  • Cisco Firepower 4100 Getting Started Guide
  • Cisco Firepower 4100 Series Hardware Installation Guide

• Firepower 9300

  • Cisco Firepower 9300 Getting Started Guide

• ISA 3000

  • Cisco ISA 3000 Getting Started Guide

• ASA 5506-X

  • Cisco Firepower Threat Defense for the ASA 5506-X Series and Firepower Device Manager Quick Start Guide
  • Cisco Firepower Threat Defense for the ASA 5506-X Series Using Firepower Management Center Quick Start Guide
  • Cisco ASA 5506-X, ASA 5506W-X, and ASA 5506H-X Hardware Installation Guide

• ASA 5508-X and 5516-X

  • Cisco ASA 5508-X and 5516-X Getting Started Guide
  • Cisco ASA 5508-X and ASA 5516-X Hardware Installation Guide

• ASA 5512-X through 5555-X

  • Cisco Firepower Threat Defense for the ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Using Firepower Device Manager Quick Start Guide
  • Cisco Firepower Threat Defense for the ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, and ASA 5555-X Using Firepower Management Center Quick Start Guide

Configuration

Configuration Examples and TechNotes

• Allow Traceroute through Firepower Threat Defense (FTD) via Threat Service Policy
• Block DNS with Security Intelligence using Firepower Management Center
• Configuration of Management access to FTD (HTTPS and SSH) via FMC
• Configure AnyConnect LDAP mapping on Firepower Threat Defense (FTD)
• Configure AnyConnect VPN on FTD using Cisco ISE as a RADIUS Server with Windows Server 2012 Root CA
• Configure DHCP Server/Relay on FTD Using Firepower Management Center (FMC)
• Configure FQDN Based Object for Access Control Rule
• Configure FTD Interfaces in Inline-Pair Mode
• Configure Firepower Chassis Manager Registration to a Smart Software Manager On-Prem
• Configure Firepower Threat Defense (FTD) Management Interface
• Configure Firesight Management Center to Display the Hit-Counts per Access Rule
• Configure IKEv2 IPv6 Site-to-Site Tunnel Between ASA and FTD
• Configure Logging on FTD via FMC
• Configure Policy-Based and Route-Based VPN from ASA and FTD to Microsoft Azure
• Configure and Troubleshoot Cisco Threat Intelligence Director

Configuration Guides

• Firepower Management Center

  • Firepower Management Center Configuration Guide, Version 6.6
  • Firepower Management Center Configuration Guide, Version 6.5
  • Firepower Management Center Configuration Guide, Version 6.4
  • Firepower Management Center Configuration Guide, Version 6.3
  • Firepower Management Center Configuration Guide, Version 6.2.3
  • Firepower Management Center Configuration Guide, Version 6.2.2
  • Firepower Management Center Configuration Guide, Version 6.2.1
  • Firepower Management Center Configuration Guide, Version 6.2
  • Firepower Management Center Configuration Guide, Version 6.1
  • Firepower Management Center Configuration Guide, Version 6.0.1

• Firepower Device Manager

  • Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6.0
  • Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0
  • Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.4.0
  • Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.3.0
  • Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.3

Programming Guides

• Cisco Firepower Threat Defense REST API Guide

Maintain and Operate

Maintain and Operate TechNotes

• Configure, Verify and Troubleshoot Port-Channel on Firepower Appliances

Troubleshooting

Error and System Messages

• Cisco Firepower 2100 Series Faults and Error Messages, Version 6.2.1
• Cisco Firepower 1000/2100 FXOS Faults and Error Messages, Firepower 6.6 and ASA 9.14(1)
• Cisco Firepower Migration Tool Error Messages
• Cisco Firepower Threat Defense Syslog Messages

Support FAQ

• Clarifying the Firepower Threat Defense LINA process CPU utilization

Troubleshooting Guides

• Cisco FXOS Troubleshooting Guide for the Firepower 1000/2100 with Firepower Threat Defense

Troubleshooting TechNotes

• Analyze Firepower Firewall Captures to Effectively Troubleshoot Network Issues
• Attempt to Upgrade Firepower Devices Results in Failure "006_check_snort.sh"
• Change or Recover Password for FTD through FXOS Chassis Manager
• Clarify Firepower Threat Defense Access Control Policy Rule Actions
• Configure Site-to-Site VPN on FTD Managed by FDM
• Configure, Verify and Troubleshoot Network Time Protocol (NTP) Settings on Firepower FXOS Appliances
• Firepower Data Path Troubleshooting Phase 8: Network Analysis Policy
• Firepower Data Path Troubleshooting Phase 7: Intrusion Policy
• Firepower Data Path Troubleshooting Phase 6: Active Authentication
• Firepower Data Path Troubleshooting Phase 5: SSL Policy
• Firepower Data Path Troubleshooting Phase 4: Access Control Policy
• Firepower Data Path Troubleshooting Phase 3: Security Intelligence
• Firepower Data Path Troubleshooting Phase 2: DAQ Layer
• Firepower Data Path Troubleshooting Phase 1: Packet Ingress
• Firepower Data Path Troubleshooting: Overview

Literature

White Papers

• • The Future of the Firewall White Paper
  • Cisco Firepower Threat Defense (FTD) SNMP Monitoring White Paper
  • Cisco Firepower Threat Defense Multi-Instance Capability on Cisco Firepower 4100 and 9300 Series Appliances White Paper
  • Identity Awareness and Control on Cisco Firepower NGFW Guide

Translated Documents

Translated End-User Guides

• Special Guides - 中文(中国) (Chinese Simplified)

  • 适用于运行 Firepower 威胁防御的 Firepower 2100 系列的思科FXOS 故障排除指南
  • 思科 Firepower 威胁防御系统日志消息
  • 浏览思科 Firepower 文档
  • 思科 ASA 和 Firepower 威胁防御重新映像指南
  • 为 Firepower 威胁防御部署集群

• Configuration Guides - 中文(中国) (Chinese Simplified)

  • Firepower 管理中心配置指南，版本 6.3
  • Firepower 管理中心配置指南，版本 6.2.3
  • Firepower 管理中心配置指南，版本6.2.2
  • 适用于 Firepower 设备管理器的思科 Firepower 威胁防御配置指 南，版本 6.1
  • 适用于 Firepower 设备管理器的思科 Firepower 威胁防御配置指南，版本 6.2

• Quick Start Guides - 中文(中国) (Chinese Simplified)

  • 适用于 Firepower 4100 的思科 FirePower 威胁防御：快速入门指南
  • 适用于 Firepower 9300 的思科 FirePower 威胁防御快速入门指南

• Upgrade Guides - 中文(中国) (Chinese Simplified)

  • Firepower 管理中心升级指南

• Installation Guides - 中文(中国) (Chinese Simplified)

  • 思科 Firepower 2100 系列硬件安装指南
  • 思科 Firepower 4100 系列硬件安装指南