Secure Firewall 200 Threat Defense Getting Started: Firewall Management Center at a Central Headquarters

PDF

Before You Begin

Updated: January 9, 2026

Overview

Check your software version and reimage if necessary, obtain your licenses, and make sure you can connect.

The Secure Firewall 200 offers next-generation firewall capabilities designed for distributed enterprises and small branch locations. It provides robust, cost-effective security and simplified management within a compact form factor, ensuring secure and optimized connectivity at the network edge. The Secure Firewall 200:

  • Extends Cisco's Hybrid Mesh Firewall architecture to branch edges

  • Provides AI-powered inspection and consistent security policies

  • Integrates SD-WAN capabilities for enhanced application performance and reliable user access

  • Delivers application and user control, efficient segmentation, and advanced security features tailored for cost-sensitive environments.

Install the firewall at a branch office and manage it on the outside interface using a central Secure Firewall Management Center.

Note

For high availability if you use zero-touch provisioning, we recommend using the Management interface. If you use zero-touch provisioning on outside and want to use high availability, you will have to change the outside IP address to a static address after registration.

    Power on the firewall

    How to power on the Secure Firewall 200 and confirm it started successfully by checking the front-panel LEDs for power and system status.

    Which application is installed: Firewall Threat Defense or ASA?

    Learn how to determine whether your Secure Firewall 200 is running Firewall Threat Defense or ASA by connecting to the console port and identifying the CLI prompt.

    Access the Firewall Threat Defense CLI

    How to access the Firewall Threat Defense CLI on the Secure Firewall 200 for setup or troubleshooting, including logging into FXOS and switching to the FTD CLI when needed.

    Check the version and reimage

    Learn how to check the current Firewall Threat Defense software version and decide whether to reimage the Secure Firewall 200 to your target release before you begin configuration.

    Obtain licenses

    Learn how to obtain Secure Firewall 200 licenses in Cisco Smart Software Manager and Cisco Commerce Workspace, including identifying required license types and the license PIDs used to order additional entitlements.

    (If Needed) Power off the firewall

    How to safely power off the Secure Firewall 200 to avoid file system damage, using either the FXOS CLI shutdown command or the Firewall Management Center shutdown workflow.