Navigating the Cisco Firepower Documentation
About Cisco Firepower Documentation
This roadmap provides links to currently available and legacy Firepower documentation:
Related Roadmaps
-
ASA documentation roadmap—http://www.cisco.com/c/en/us/td/docs/security/asa/roadmap/asaroadmap.html.
-
FXOS documentation roadmap—http://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/roadmap/fxos-roadmap.html.
License Documentation
-
Feature license information:
-
The Licensing chapter in the Configuration Guide for your Firepower version.
-
Open source license information:
-
Open source license information for all Cisco products, including Firepower releases, is available at https://www.cisco.com/go/opensource.
-
Each product has its own open source licensing document, available from the Licensing Information link on the top-level documentation listing page for the product. See Top-Level Documentation Listing Pages for FMC Deployments.
-
Current Documentation (Version 6.0 and Later)
See the following documentation for Firepower Version 6.0 and later:
Top-Level Documentation Listing Pages for FMC Deployments
The following documents may be helpful when configuring Firepower Management Center deployments, Version 6.0+.
 Note |
Some of the linked documents are not applicable to Firepower Management Center deployments. For example, some links on Firepower Threat Defense pages are specific to deployments managed by Firepower Device Manager, and some links on hardware pages are unrelated to Firepower. To avoid confusion, pay careful attention to document titles. Also, some documents cover multiple products and therefore may appear on multiple product pages. |
Firepower Management Center
-
Firepower Management Center hardware appliances:
http://www.cisco.com/c/en/us/support/security/defense-center/tsd-products-support-series-home.html
-
Firepower Management Center Virtual appliances:
Firepower Threat Defense, also called NGFW (Next Generation Firewall) devices
-
Firepower Threat Defense software:
http://www.cisco.com/c/en/us/support/security/firepower-ngfw/tsd-products-support-series-home.html
-
Firepower Threat Defense Virtual:
-
Firepower 2100 series:
-
Firepower 4100 series:
-
Firepower 9300:
-
ASA 5500-X series:
-
ISA 3000:
Classic devices, also called NGIPS (Next Generation Intrusion Prevention System) devices
-
ASA with FirePOWER Services:
-
ASA 5500-X with FirePOWER Services:
-
ISA 3000 with FirePOWER Services:
-
-
Firepower 8000 series:
-
Firepower 7000 series:
-
AMP for Networks:
https://www.cisco.com/c/en/us/support/security/amp-appliances/tsd-products-support-series-home.html
-
NGIPSv (virtual device):
Compatibility Guide
The Cisco Firepower Compatibility Guide lists the Cisco Firepower System software and hardware compatibility and requirements.
Release Notes
Release notes provide critical and release-specific information.
Note |
For ASA release notes, see the ASA documentation roadmap. For FXOS release notes, see the FXOS documentation roadmap. For Firepower hotfix release notes, see the Firepower Hotfix Release Notes. |
|
Release |
Guide |
|---|---|
|
Version 6.4.0.x |
|
|
Version 6.3.0.x |
|
|
Version 6.2.3.x |
|
|
Version 6.2.2.x |
|
|
Version 6.2.1 |
Cisco Firepower Version 6.2.1 has been replaced by Cisco Firepower Version 6.2.2, which offers the same functionality and supports the full set of Firepower platforms; we strongly recommend updating to Version 6.2.2 in place of Version 6.2.1. |
|
Version 6.2.0.x |
|
|
Version 6.1.x |
|
|
Version 6.0.1.x |
|
|
Version 6.0.0.x |
Migration Guides
Firepower Migration Tool
You can use the Firepower Migration Tool to migrate supported ASA configurations to supported Firepower Threat Defense confgurations for Firepower releases 6.2.3 and later.
ASA-to-Firepower Threat Defense Migration Tool Image
The Cisco ASA to Firepower Threat Defense Migration Guide describes how to use Cisco’s migration tool to convert ASA configurations to Firepower Threat Defense configurations.
Note |
This migration tool is deprecated and cannot migrate your ASA images to the latest Firepower Threat Defense releases. |
Upgrade Guides
-
Firepower Management Center Upgrade Guide—Upgrade a Firepower Management Center deployment where all appliances are running at least Firepower Version 5.4.
-
Cisco ASA Upgrade Guide—Upgrade an ASA device with an ASA FirePOWER module managed by ASDM.
Configuration Guides
This section lists configuration guides by management device:
Note |
For ASA configuration guides, see the ASA documentation roadmap. For FXOS configuration guides, see the FXOS documentation roadmap. |
Firepower Management Center
The Cisco Firepower Management Center Configuration Guide includes detailed information on Firepower configuration using the Firepower Management Center web interface.
| Release | Guide |
|---|---|
|
All Versions |
Firepower Threat Defense on 4100 or 9300 hardware, managed by Firepower Management Center: Deploy a Cluster for Firepower Threat Defense. |
|
Version 6.4.0 |
Firepower Management Center Configuration Guide, Version 6.4 |
|
Version 6.3.0 |
Firepower Management Center Configuration Guide, Version 6.3 |
|
Version 6.2.3 |
Firepower Management Center Configuration Guide, Version 6.2.3 |
|
Version 6.2.2 |
Firepower Management Center Configuration Guide, Version 6.2.2 |
|
Version 6.2.1 |
Firepower Management Center Configuration Guide, Version 6.2.1 |
|
Version 6.2.0.x |
Firepower Management Center Configuration Guide, Version 6.2 |
|
Version 6.1.x |
Firepower Management Center Configuration Guide, Version 6.1 |
|
Version 6.0.1.x |
Firepower Management Center Configuration Guide, Version 6.0.1 |
|
Version 6.0.0.x |
Firepower Management Center Configuration Guide, Version 6.0 |
ASA with FirePOWER Services Local Management via ASDM
On an ASA device running version 6.0+ of the ASA FirePOWER module, you can configure ASA FirePOWER module functionality via ASDM. The ASA with FirePOWER Services Local Management Configuration Guide provides information on configuring the module.
| Release | Guide |
|---|---|
|
Version 6.4.0 |
ASA with FirePOWER Services Local Management Configuration Guide, Version 6.4 |
|
Version 6.3.0 |
ASA with FirePOWER Services Local Management Configuration Guide, Version 6.3 |
|
Version 6.2.3 |
ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2.3 |
|
Version 6.2.2 |
ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2.2 |
|
Version 6.2.0.x |
ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2 |
|
Version 6.1.x |
ASA with FirePOWER Services Local Management Configuration Guide, Version 6.1 |
|
Version 6.0.1.x |
No updates were made to the ASA FirePOWER Services Local Management Configuration Guide for Version 6.0.1; see Version 6.0 documentation set for applicable information. |
|
Version 6.0.0.x |
ASA with FirePOWER Services Local Management Configuration Guide, Version 6.0 |
Firepower Device Manager
| Release | Guide |
|---|---|
|
Version 6.4.0 |
Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.4.0 |
|
Version 6.3.0 |
Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.3.0 |
|
Version 6.2.3 |
Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.3 |
|
Version 6.2.2 |
Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.2 |
|
Version 6.2.1 |
Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.1 |
|
Version 6.2.0.x |
|
|
Version 6.1.x |
Configuration Examples and Tech Notes
Configuration examples are "how to" guides that provide an end-to-end example of the procedures required to complete a specific configuration. If the example requires configuration in more than one management application, such as Firepower Chassis Manager and Firepower Management Center the configuraton example includes the procedures for both management applications.
Command Reference Guide
The Command Reference Guide for Firepower Threat Defense is available here.
Hardware Guides
This section contains the following topics:
Hardware Installation
These guides provide information about Firepower hardware, including deployment information, physical installation procedures, field-replaceable components, specifications, and safety and regulatory information.
Note |
For hardware installation guides for ASA 5500-X series devices, see the ASA documentation roadmap. For hardware installation guides for Firepower 4100/9300 chassis, see the FXOS documentation roadmap. For virtual installation guides, see Quick Start and Getting Started Guides. |
Firepower Hardware Installation Guides
ASA 5500-X Series Hardware Installation Guides
ISA 3000 Hardware Installation Guide
Regulatory Compliance and Safety Information
Regulatory compliance and safety information guides provides general safety guidelines and regulatory information for Firepower devices. The books related to regulatory compliance and safety information are:
Firepower Regulatory Compliance and Safety Information
-
Regulatory Compliance and Safety Information—Cisco Firepower Management Center 1000, 2500, and 4500
-
Regulatory Compliance and Safety Information—Cisco Firepower 2100 Series
-
Regulatory Compliance and Safety Information—Cisco Firepower 4100 Series
-
Regulatory Compliance and Safety Information-Cisco Firepower 9300
ASA Regulatory Compliance and Safety Information
Quick Start and Getting Started Guides
Quick start and getting started guides provide information on deploying the appliance, procedures for installing your appliance on your network, initial setup and configuration, and reimaging an appliance. Virtual quick start guides include deployment, installation, and initial setup information for virtual environments.
|
Module |
Guide |
|---|---|
|
Firepower Management Center quick start guides |
|
|
Firepower Threat Defense quick start guides for hardware (Firepower Management Center) |
|
|
Firepower Threat Defense quick start guides for hardware (Firepower Device Manager) |
|
|
Firepower Threat Defense quick start guides for virtual appliances (Firepower Management Center) |
|
|
Firepower Threat Defense quick start guides for virtual appliances (Firepower Device Manager) |
|
|
ASA FirePOWER module quick start guide |
The ASA FirePOWER module runs a separate application from the ASA. Refer the Cisco ASA FirePOWER Module Quick Start Guide for instructions on setting up the module on supported ASA devices. For additional information on installation of supported ASA devices for use with Firepower, see the ASA documentation roadmap. |
|
Firepower classic device quick start guides |
Troubleshooting Guides and Articles
Links to troubleshooting Tech Notes and other troubleshooting resources are available under the "Troubleshooting and Alerts" heading on the top-level document listing page for each product on Cisco.com. See the links for your products in Top-Level Documentation Listing Pages for FMC Deployments.
Troubleshooting guides are listed below:
Integration API Documentation
Integration guides provide information on extending Firepower capabilities through custom application development using exposed APIs.
| Release | Guide |
|---|---|
|
Version 6.4.0 |
No updates were made to the following guides for Version 6.4. You can follow the guides listed below: |
|
Version 6.3.0 |
No updates were made to the following guides for Version 6.3. You can follow the guides listed below: |
|
Version 6.2.3 |
No updates were made to the following guides for Version 6.2.3. You can follow the guides listed below: |
|
Version 6.2.2 |
No updates were made to the following guides for Version 6.2.2. You can follow the guides listed below: |
|
Version 6.2.1 |
No updates were made to the following guides for Version 6.2.1. You can follow the guides listed below: |
|
Version 6.2.0.x |
No updates were made to the following guides for Version 6.2. You can follow the guides listed below: |
|
Version 6.1.x |
No updates were made to the Host Input or Remediation API guides for Version 6.1. You can follow the guides listed below: |
|
Version 6.0.1.x |
No updates were made to the API documentation for Version 6.0.1; see Version 6.0 documentation. |
|
Version 6.0.0.x |
User Agent Documentation
Terminal Services (TS) Agent Documentation
The Firepower System TS Agent is a utility that assigns unique port ranges to users reported by Windows Terminal Servers to uniquely identify the users on the Firepower Management Center, to support user awareness and user control. See the Cisco Terminal Services (TS) Agent Guide, Version 1.1 for more information.
Legacy Documentation (Version 5.4.x and Earlier)
See the following sections for Version 5.4.x and earlier of the FireSIGHT System and Sourcefire 3D System:
Note |
For additional information on support services for customers who purchased products from Sourcefire, see: http://www.cisco.com/web/services/acquisitions/sourcefire.html |
Version 5.4.0.x and Version 5.4.1.x
Note that one consolidated documentation set has been published for Version 5.4, Version 5.4.0.x, and Version 5.4.1.x. Version 5.4.1 documentation reflects support for the ASA FirePOWER module on the ASA5506-X, ASA5506H-X, ASA5506W-X, ASA5508-X, or ASA5516-X, and the removal of the requirement for an SSL license (which is required to use SSL decryption and inspection in Version 5.4, but is no longer required in Version 5.4.1). Otherwise, the documentation set applies to all currently available 5.4.x versions. Cisco strongly recommends that you upgrade to Version 5.4.1 as soon as possible. If you plan to use the SSL feature or to manage an ASA5506-X, you must upgrade to at least Version 5.4.1. For managed devices other than the ASA5506-X, ASA5506H-X, ASA5506W-X, ASA5508-X, or ASA5516-X, Cisco strongly recommends that you upgrade to Version 5.4.0.2 as soon as possible.
|
Release |
Guide |
|---|---|
|
FireSIGHT System Release Notes, Version 5.4.x |
Consult the FireSIGHT System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release. |
|
ASA FirePOWER Quick Start Guide |
The ASA FirePOWER module runs a separate application from the ASA. Refer the Cisco ASA FirePOWER Module Quick Start Guide for instructions on setting up the module on supported ASA devices. For additional information on installation of supported ASA devices for use with the FireSIGHT System, see the ASA documentation roadmap. |
|
ASA FirePOWER Module User Guide, Version 5.4.1.x |
On an ASA5506-X, ASA5506H-X, ASA5506W-X, ASA5508-X, or ASA5516-X running Version 5.4.1.x of the ASA FirePOWER module, you can configure ASA FirePOWER module functionality on the module via ASDM. The Cisco ASA FirePOWER Module User Guide provides information on configuring the module. |
|
Regulatory Compliance and Safety Information for FirePOWER and FireSIGHT Appliances |
Cisco FirePOWER and FireSIGHT appliances are delivered on multiple hardware platforms. Consult this guide for general safety guidelines and regulatory information for each appliance: Note that the Defense Center 4000 and the Defense Center 2000 appliances are based on the UCS C220 platform; for these models, consult the Regulatory Compliance and Safety Information for the Cisco UCS Guide for general safety guidelines and regulatory information for each appliance. |
|
FireSIGHT System Installation Guides, Version 5.4.x |
The FireSIGHT System Installation Guide provides deployment information, procedures for installing your appliance on your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The FireSIGHT System Virtual Installation Guide includes deployment, installation, and initial setup information for virtual environments. |
|
FireSIGHT System User Guide, Version 5.4.x |
The FireSIGHT System User Guide includes detailed information regarding configuration of your FireSIGHT System using both the web interface and the CLI. |
|
FireSIGHT System Integration Guides, Version 5.4.x |
The FireSIGHT System integration guides provide information on extending your FireSIGHT System capabilities through custom application development using exposed FireSIGHT System APIs. |
Version 5.3.1.x
Note |
Before you install any hardware, read the Regulatory Compliance and Safety Information for your platform, provided as a chapter in the installation guides for each release. |
|
Release |
Guide |
|---|---|
|
FireSIGHT System Release Notes, Version 5.3.1.x |
Consult the FireSIGHT System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release.
|
|
ASA FirePOWER Quick Start Guide |
The ASA FirePOWER module runs a separate application from the ASA. Consult the Cisco ASA FirePOWER Module Quick Start Guide for instructions on setting up the module on supported ASA devices. For additional information on installation of supported ASA devices for use with the FireSIGHT System, see the ASA documentation roadmap. |
|
FireSIGHT System Installation Guides, Version 5.3.1.x |
The FireSIGHT System Installation Guide provides deployment information, procedures for installing your appliance on your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The FireSIGHT System Virtual Installation Guide includes deployment, installation, and initial setup information for virtual environments. |
|
FireSIGHT System User Guide, Version 5.3.1.x |
The FireSIGHT System User Guide includes detailed information regarding configuration of your Sourcefire 3D System using both the web interface and the CLI. |
|
FireSIGHT System Integration Guides, Version 5.3.1.x |
The FireSIGHT System integration guides provide information on extending your FireSIGHT System capabilities through custom application development using exposed FireSIGHT System APIs. |
Sourcefire 3D System Documentation
This section lists legacy Sourcefire 3D System documentation by release:
Version 5.3.0.x
Note |
Before you install any hardware, read the Regulatory Compliance and Safety Information for your platform, provided as a chapter in the installation guides for each release. |
|
Release |
Guide |
|---|---|
|
Sourcefire 3D System Release Notes, Version 5.3.0.x |
Consult the Sourcefire 3D System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release. |
|
Sourcefire 3D System Installation Guides, Version 5.3.0.x |
The Sourcefire 3D System Installation Guide provides deployment information, procedures for installing your Sourcefire appliance on your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The Sourcefire Virtual Installation Guide and the Sourcefire Software for X-Series Installation Guide include deployment, installation, and initial setup information for virtual environments and Blue Coat X-Series platforms, respectively. |
|
Sourcefire 3D System User Guide, Version 5.3.0.x |
The Sourcefire 3D System User Guide includes detailed information regarding configuration of your Sourcefire 3D System using both the web interface and the CLI. |
|
Sourcefire 3D System Quick Start Guides, Version 5.3.0.x |
The quick start guides provide information on installing your Sourcefire appliance on your network, as well as abbreviated specifications, safety, and usage information. |
|
Sourcefire 3D System Integration Guides, Version 5.3.0.x |
The Sourcefire 3D System integration guides provide information on extending your Sourcefire 3D System capabilities through custom application development using exposed Sourcefire 3D System APIs. |
Version 5.2.x
|
Release |
Guide |
|---|---|
|
Sourcefire 3D System Release Notes, Version 5.2.x |
Consult the Sourcefire 3D System release notes for information on known issues, resolved issues, product compatibility, and patch and update installation procedures. Note that this document lists the release notes for the most recent patch release. |
|
Sourcefire 3D System Installation Guides, Version 5.2.x |
The Sourcefire 3D System Installation Guide provides deployment information, procedures for connecting your Sourcefire appliance to your network, initial setup and configuration, reimaging an appliance, and replacing field-replaceable components, as well as hardware specifications and safety and regulatory information. The Sourcefire Virtual Installation Guide includes deployment, installation, and initial setup information for virtual environments. |
|
Sourcefire 3D System User Guide, Version 5.2.x |
The Sourcefire 3D System User Guide includes detailed information regarding configuration of your Sourcefire 3D System using both the web interface and the CLI. |
|
Sourcefire 3D System Quick Start Guides, Version 5.2.x |
The quick start guides provide information on installing your Sourcefire appliance on your network, as well as abbreviated specifications, safety, and usage information. |
|
Sourcefire 3D System Integration Guides, Version 5.2.x |
The Sourcefire 3D System integration guides provide information on extending your Sourcefire 3D System capabilities through custom application development using exposed Sourcefire 3D System APIs. |
|
Migration Guide, Version 5.2.x |
The Sourcefire 3D System Migration Guide provides procedures for migrating event and policy data from Version 4.10.3 to Version 5.2. |
FireSIGHT System User Agent
The FireSIGHT System User Agent is a FireSIGHT utility that collects user information from Microsoft Active Directory Servers and hosts on your network and communicates that information to your FireSIGHT Defense Centers to support user awareness and user control.
Qualys Connector Documentation
The Sourcefire 3D System Qualys Connector is a utility that allows you to import Qualys scan data to enhance the discovery data in the Sourcefire 3D System. See the Sourcefire 3D System Qualys Guide, Version 1.0.1 for more information.
Additional Resources
The Firewalls Community is an exhaustive repository of reference material that complements our extensive documentation. This includes links to 3D models of our hardware, hardware configuration selector, product collateral, configuration examples, troubleshooting tech notes, training videos, lab and Cisco Live sessions, social media channels, Cisco Blogs and all the documentation published by the Technical Publications team.
Some of the individuals posting to community sites or video sharing sites, including the moderators, work for Cisco Systems. Opinions expressed on those sites and in any corresponding comments are the personal opinions of the original authors, not of Cisco. The content is provided for informational purposes only and is not meant to be an endorsement or representation by Cisco or any other party.
Note |
Some of the videos, technical notes, and reference material in the Firewalls Community points to older versions of the Firepower Management Center. Your version of the Firepower Management Center and the version referenced in the videos or technical notes might have differences in the user interface that cause the procedures not to be identical. |
Feedback