Last Updated: October 2, 2019

Navigating the Cisco Firepower Documentation

License Documentation

Current Documentation (Version 6.0 and Later)

See the following documentation for Firepower Version 6.0 and later:

Top-Level Documentation Listing Pages for FMC Deployments

The following documents may be helpful when configuring Firepower Management Center deployments, Version 6.0+.


Note
Some of the linked documents are not applicable to Firepower Management Center deployments. For example, some links on Firepower Threat Defense pages are specific to deployments managed by Firepower Device Manager, and some links on hardware pages are unrelated to Firepower. To avoid confusion, pay careful attention to document titles. Also, some documents cover multiple products and therefore may appear on multiple product pages.

Firepower Management Center

Firepower Threat Defense, also called NGFW (Next Generation Firewall) devices

Classic devices, also called NGIPS (Next Generation Intrusion Prevention System) devices

Release Notes

Release notes provide critical and release-specific information.


Note

For ASA release notes, see the ASA documentation roadmap.

For FXOS release notes, see the FXOS documentation roadmap.

For Firepower hotfix release notes, see the Firepower Hotfix Release Notes.

Release

Guide

Version 6.5.0

Version 6.4.0.x

Version 6.3.0.x

Version 6.2.3.x

Version 6.2.2.x

Version 6.2.1

Cisco Firepower Version 6.2.1 has been replaced by Cisco Firepower Version 6.2.2, which offers the same functionality and supports the full set of Firepower platforms; we strongly recommend updating to Version 6.2.2 in place of Version 6.2.1.

Version 6.2.0.x

Version 6.1.x

Version 6.0.1.x

Version 6.0.0.x

Migration Guides

Firepower Migration Tool

You can use the Firepower Migration Tool to migrate supported ASA configurations to supported Firepower Threat Defense confgurations for Firepower releases 6.2.3 and later.

ASA-to-Firepower Threat Defense Migration Tool Image

The Cisco ASA to Firepower Threat Defense Migration Guide describes how to use Cisco’s migration tool to convert ASA configurations to Firepower Threat Defense configurations.


Note

This migration tool is deprecated and cannot migrate your ASA images to the latest Firepower Threat Defense releases.

Configuration Guides

This section lists configuration guides by management device:


Note

For ASA configuration guides, see the ASA documentation roadmap.

For FXOS configuration guides, see the FXOS documentation roadmap.

Firepower Management Center

The Cisco Firepower Management Center Configuration Guide includes detailed information on Firepower configuration using the Firepower Management Center web interface.

Release Guide

All Versions

Firepower Threat Defense on 4100 or 9300 hardware, managed by Firepower Management Center: Deploy a Cluster for Firepower Threat Defense.

Version 6.5.0

Firepower Management Center Configuration Guide, Version 6.5

Version 6.4.0

Firepower Management Center Configuration Guide, Version 6.4

Version 6.3.0

Firepower Management Center Configuration Guide, Version 6.3

Version 6.2.3

Firepower Management Center Configuration Guide, Version 6.2.3

Version 6.2.2

Firepower Management Center Configuration Guide, Version 6.2.2

Version 6.2.1

Firepower Management Center Configuration Guide, Version 6.2.1

Version 6.2.0.x

Firepower Management Center Configuration Guide, Version 6.2

Version 6.1.x

Firepower Management Center Configuration Guide, Version 6.1

Version 6.0.1.x

Firepower Management Center Configuration Guide, Version 6.0.1

Version 6.0.0.x

Firepower Management Center Configuration Guide, Version 6.0

ASA with FirePOWER Services Local Management via ASDM

On an ASA device running version 6.0+ of the ASA FirePOWER module, you can configure ASA FirePOWER module functionality via ASDM. The ASA with FirePOWER Services Local Management Configuration Guide provides information on configuring the module.

Release Guide

Version 6.5.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.5

Version 6.4.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.4

Version 6.3.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.3

Version 6.2.3

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2.3

Version 6.2.2

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2.2

Version 6.2.0.x

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2

Version 6.1.x

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.1

Version 6.0.1.x

No updates were made to the ASA FirePOWER Services Local Management Configuration Guide for Version 6.0.1; see Version 6.0 documentation set for applicable information.

Version 6.0.0.x

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.0

Firepower Device Manager

Release Guide

Version 6.5.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0

Version 6.4.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.4.0

Version 6.3.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.3.0

Version 6.2.3

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.3

Version 6.2.2

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.2

Version 6.2.1

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.1

Version 6.2.0.x

Firepower Device Manager Configuration Guide, Version 6.2

Version 6.1.x

Firepower Device Manager Configuration Guide, Version 6.1

Configuration Examples and Tech Notes

Configuration examples are "how to" guides that provide an end-to-end example of the procedures required to complete a specific configuration. If the example requires configuration in more than one management application, such as Firepower Chassis Manager and Firepower Management Center the configuraton example includes the procedures for both management applications.

Command Reference Guide

The Command Reference Guide for Firepower Threat Defense is available here.

Hardware Guides

This section contains the following topics:

Hardware Installation

These guides provide information about Firepower hardware, including deployment information, physical installation procedures, field-replaceable components, specifications, and safety and regulatory information.


Note
For virtual installation guides, see Quick Start and Getting Started Guides.
Firepower Hardware Installation Guides
ASA 5500-X Series Hardware Installation Guides
ISA 3000 Hardware Installation Guide

Regulatory Compliance and Safety Information

Regulatory compliance and safety information guides provides general safety guidelines and regulatory information for Firepower devices. The books related to regulatory compliance and safety information are:

Firepower Regulatory Compliance and Safety Information
ASA Regulatory Compliance and Safety Information

Quick Start and Getting Started Guides

Quick start and getting started guides provide information on deploying the appliance, procedures for installing your appliance on your network, initial setup and configuration, and reimaging an appliance. Virtual quick start guides include deployment, installation, and initial setup information for virtual environments.

Module

Guide

Firepower Management Center quick start guides

Firepower Threat Defense quick start guides for hardware (Firepower Management Center)

Firepower Threat Defense quick start guides for hardware (Firepower Device Manager)

Firepower Threat Defense quick start guides for virtual appliances (Firepower Management Center)

Firepower Threat Defense quick start guides for virtual appliances (Firepower Device Manager)

ASA FirePOWER module quick start guide

The ASA FirePOWER module runs a separate application from the ASA. Refer the Cisco ASA FirePOWER Module Quick Start Guide for instructions on setting up the module on supported ASA devices.

For additional information on installation of supported ASA devices for use with Firepower, see the ASA documentation roadmap.

Firepower classic device quick start guides

Troubleshooting Guides and Articles

Links to troubleshooting Tech Notes and other troubleshooting resources are available under the "Troubleshooting and Alerts" heading on the top-level document listing page for each product on Cisco.com. See the links for your products in Top-Level Documentation Listing Pages for FMC Deployments.

Troubleshooting guides are listed below:

Integration and API Documentation

Integration guides provide information on extending Firepower capabilities through custom application development using exposed APIs.

Release Guide

Version 6.5.0

No updates were made to the following guides for Version 6.5. You can follow the guides listed below:

Version 6.4.0

No updates were made to the following guides for Version 6.4. You can follow the guides listed below:

Version 6.3.0

No updates were made to the following guides for Version 6.3. You can follow the guides listed below:

Version 6.2.3

No updates were made to the following guides for Version 6.2.3. You can follow the guides listed below:

Version 6.2.2

No updates were made to the following guides for Version 6.2.2. You can follow the guides listed below:

Version 6.2.1

No updates were made to the following guides for Version 6.2.1. You can follow the guides listed below:

Version 6.2.0.x

No updates were made to the following guides for Version 6.2. You can follow the guides listed below:

Version 6.1.x

No updates were made to the Host Input or Remediation API guides for Version 6.1. You can follow the guides listed below:

Version 6.0.1.x

No updates were made to the API documentation for Version 6.0.1; see Version 6.0 documentation.

Version 6.0.0.x

Terminal Services (TS) Agent Documentation

The Firepower System TS Agent is a utility that assigns unique port ranges to users reported by Windows Terminal Servers to uniquely identify the users on the Firepower Management Center, to support user awareness and user control. See the Cisco Terminal Services (TS) Agent Guide, Version 1.1 for more information.

Legacy Documentation (Version 5.4.x and Earlier)

See the following sections for Version 5.4.x and earlier of the FireSIGHT System and Sourcefire 3D System:


Note

For additional information on support services for customers who purchased products from Sourcefire, see: http://www.cisco.com/web/services/acquisitions/sourcefire.html

Version 5.4.0.x and Version 5.4.1.x

Note that one consolidated documentation set has been published for Version 5.4, Version 5.4.0.x, and Version 5.4.1.x. Version 5.4.1 documentation reflects support for the ASA FirePOWER module on the ASA5506-X, ASA5506H-X, ASA5506W-X, ASA5508-X, or ASA5516-X, and the removal of the requirement for an SSL license (which is required to use SSL decryption and inspection in Version 5.4, but is no longer required in Version 5.4.1). Otherwise, the documentation set applies to all currently available 5.4.x versions. Cisco strongly recommends that you upgrade to Version 5.4.1 as soon as possible. If you plan to use the SSL feature or to manage an ASA5506-X, you must upgrade to at least Version 5.4.1. For managed devices other than the ASA5506-X, ASA5506H-X, ASA5506W-X, ASA5508-X, or ASA5516-X, Cisco strongly recommends that you upgrade to Version 5.4.0.2 as soon as possible.

Release

Guide

FireSIGHT System Release Notes, Version 5.4.x

Consult the FireSIGHT System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release.

ASA FirePOWER Quick Start Guide

The ASA FirePOWER module runs a separate application from the ASA. Refer the Cisco ASA FirePOWER Module Quick Start Guide for instructions on setting up the module on supported ASA devices.

For additional information on installation of supported ASA devices for use with the FireSIGHT System, see the ASA documentation roadmap.

ASA FirePOWER Module User Guide, Version 5.4.1.x

On an ASA5506-X, ASA5506H-X, ASA5506W-X, ASA5508-X, or ASA5516-X running Version 5.4.1.x of the ASA FirePOWER module, you can configure ASA FirePOWER module functionality on the module via ASDM. The Cisco ASA FirePOWER Module User Guide provides information on configuring the module.

Regulatory Compliance and Safety Information for FirePOWER and FireSIGHT Appliances

Cisco FirePOWER and FireSIGHT appliances are delivered on multiple hardware platforms. Consult this guide for general safety guidelines and regulatory information for Firepower 7000/8000 series:

https://www.cisco.com/c/dam/en/us/td/docs/security/firesight/hw-docs/regulatory/compliance/RCSI-0307-book.pdf

Note that the Defense Center 4000 and the Defense Center 2000 appliances are based on the UCS C220 platform; for these models, consult the Regulatory Compliance and Safety Information for the Cisco UCS Guide for general safety guidelines and regulatory information for each appliance.

FireSIGHT System Installation Guides, Version 5.4.x

The FireSIGHT System Installation Guide provides deployment information, procedures for installing your appliance on your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The FireSIGHT System Virtual Installation Guide includes deployment, installation, and initial setup information for virtual environments.

FireSIGHT System User Guide, Version 5.4.x

The FireSIGHT System User Guide includes detailed information regarding configuration of your FireSIGHT System using both the web interface and the CLI.

FireSIGHT System Integration Guides, Version 5.4.x

The FireSIGHT System integration guides provide information on extending your FireSIGHT System capabilities through custom application development using exposed FireSIGHT System APIs.

Version 5.3.1.x


Note

Before you install any hardware, read the Regulatory Compliance and Safety Information for your platform, provided as a chapter in the installation guides for each release.

Release

Guide

FireSIGHT System Release Notes, Version 5.3.1.x

Consult the FireSIGHT System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release.

ASA FirePOWER Quick Start Guide

The ASA FirePOWER module runs a separate application from the ASA. Consult the Cisco ASA FirePOWER Module Quick Start Guide for instructions on setting up the module on supported ASA devices.

For additional information on installation of supported ASA devices for use with the FireSIGHT System, see the ASA documentation roadmap.

FireSIGHT System Installation Guides, Version 5.3.1.x

The FireSIGHT System Installation Guide provides deployment information, procedures for installing your appliance on your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The FireSIGHT System Virtual Installation Guide includes deployment, installation, and initial setup information for virtual environments.

FireSIGHT System User Guide, Version 5.3.1.x

The FireSIGHT System User Guide includes detailed information regarding configuration of your Sourcefire 3D System using both the web interface and the CLI.

FireSIGHT System Integration Guides, Version 5.3.1.x

The FireSIGHT System integration guides provide information on extending your FireSIGHT System capabilities through custom application development using exposed FireSIGHT System APIs.

Sourcefire 3D System Documentation

This section lists legacy Sourcefire 3D System documentation by release:

Version 5.3.0.x


Note

Before you install any hardware, read the Regulatory Compliance and Safety Information for your platform, provided as a chapter in the installation guides for each release.

Release

Guide

Sourcefire 3D System Release Notes, Version 5.3.0.x

Consult the Sourcefire 3D System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release.

Sourcefire 3D System Installation Guides, Version 5.3.0.x

The Sourcefire 3D System Installation Guide provides deployment information, procedures for installing your Sourcefire appliance on your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The Sourcefire Virtual Installation Guide and the Sourcefire Software for X-Series Installation Guide include deployment, installation, and initial setup information for virtual environments and Blue Coat X-Series platforms, respectively.

Sourcefire 3D System User Guide, Version 5.3.0.x

The Sourcefire 3D System User Guide includes detailed information regarding configuration of your Sourcefire 3D System using both the web interface and the CLI.

Sourcefire 3D System Quick Start Guides, Version 5.3.0.x

The quick start guides provide information on installing your Sourcefire appliance on your network, as well as abbreviated specifications, safety, and usage information.

Sourcefire 3D System Integration Guides, Version 5.3.0.x

The Sourcefire 3D System integration guides provide information on extending your Sourcefire 3D System capabilities through custom application development using exposed Sourcefire 3D System APIs.

Version 5.2.x

Release

Guide

Sourcefire 3D System Release Notes, Version 5.2.x

Consult the Sourcefire 3D System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release.

Sourcefire 3D System Installation Guides, Version 5.2.x

The Sourcefire 3D System Installation Guide provides deployment information, procedures for connecting your Sourcefire appliance to your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The Sourcefire Virtual Installation Guide includes deployment, installation, and initial setup information for virtual environments.

Sourcefire 3D System User Guide, Version 5.2.x

The Sourcefire 3D System User Guide includes detailed information regarding configuration of your Sourcefire 3D System using both the web interface and the CLI.

Sourcefire 3D System Quick Start Guides, Version 5.2.x

The quick start guides provide information on installing your Sourcefire appliance on your network, as well as abbreviated specifications, safety, and usage information.

Sourcefire 3D System Integration Guides, Version 5.2.x

The Sourcefire 3D System integration guides provide information on extending your Sourcefire 3D System capabilities through custom application development using exposed Sourcefire 3D System APIs.

Migration Guide, Version 5.2.x

The Sourcefire 3D System Migration Guide provides procedures for migrating event and policy data from Version 4.10.3 to Version 5.2.

Qualys Connector Documentation

The Sourcefire 3D System Qualys Connector is a utility that allows you to import Qualys scan data to enhance the discovery data in the Sourcefire 3D System. See the Sourcefire 3D System Qualys Guide, Version 1.0.1 for more information.

Additional Resources

The Firewalls Community is an exhaustive repository of reference material that complements our extensive documentation. This includes links to 3D models of our hardware, hardware configuration selector, product collateral, configuration examples, troubleshooting tech notes, training videos, lab and Cisco Live sessions, social media channels, Cisco Blogs and all the documentation published by the Technical Publications team.

Some of the individuals posting to community sites or video sharing sites, including the moderators, work for Cisco Systems. Opinions expressed on those sites and in any corresponding comments are the personal opinions of the original authors, not of Cisco. The content is provided for informational purposes only and is not meant to be an endorsement or representation by Cisco or any other party.


Note
Some of the videos, technical notes, and reference material in the Firewalls Community points to older versions of the Firepower Management Center. Your version of the Firepower Management Center and the version referenced in the videos or technical notes might have differences in the user interface that cause the procedures not to be identical.