采用 FirePOWER Services 的 Cisco ASA
反馈- 思科下一代防火墙使用入门：
- 分步指南：下一代防火墙设置
-
主要搜索结果
主要信息
查看此文档的客户还查看了以下内容
最新安全公告
- 06-Dec-2023
- 05-Oct-2023
- 03-Aug-2023
- 24-Jul-2023
- 24-Jul-2023
-
产品手册和产品信息
- Cisco ASA 5500 Series Data Sheet
- 具备 FirePOWER 服务的 Cisco ASA 防火墙 (PDF - 1 MB)
产品手册
-
请打印这些文档并与贵组织的决策者共享。
- Cisco ASA with FirePOWER Services
概述
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 1 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.17(x), Adaptive Security Virtual Appliance (ASAv) Release 9.17(x) and Adaptive Security Device Manager (ASDM) Release 7.17(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.14(x), Adaptive Security Virtual Appliance (ASAv) Release 9.14(x) and Adaptive Security Device Manager (ASDM) Release 7.14(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance(ASA) 9.12(x) Adaptive Security Virtual Appliance(ASAv) 9.12(x) and Adaptive Security Device Manager(ASDM) 7.12(x)
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series Security Appliance & 5 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.8(x), Adaptive Security Virtual Appliance (ASAv) Release 9.8(x) and Adaptive Security Device Manager (ASDM) Release 7.8(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.15(x), Adaptive Security Virtual Appliance (ASAv) Release 9.15(x) and Adaptive Security Device Manager (ASDM) Release 7.15(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.13(x), Adaptive Security Virtual Appliance (ASAv) Release 9.13(x) and Adaptive Security Device Manager (ASDM) Release 7.13(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance software version 9.9.2
- End-of-Sale and End-of-Life Announcement for the Cisco 5506 FTD Appliance Series and Licenses
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.6(x), Adaptive Security Virtual Appliance (ASAv) Release 9.6(x) and Adaptive Security Device Manager (ASDM) Release 7.6(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.10(x) Adaptive Security Virtual Appliance (ASAv) Release 9.10(x) and Adaptive Security Device Manager (ASDM) Release 7.10(x)
- End-of-Sale and End-of-Life Announcement for the Cisco 512 MB Memory Upgrade for Cisco ASA 5505
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) 9.4(x) and Cisco Adaptive Security Device Manager (ASDM) 7.4(x)
生命周期终止和销售终止通知
-
安全公告
- Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability
- Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability
- Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability
- Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability
- Software Advisory: Inoperable FTD Device/NetFlow Exporter after Reboot (CSCvv69991)
- Cisco Firepower Management Center Static Credential Vulnerabilities
- Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability
- Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability
- Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability
- Cisco Secure Boot Hardware Tampering Vulnerability
- SW_Advisory_AMP_cloud_infastructure_changes (PDF - 47 KB)
- SW_Advisory_CSCvj93913 (DOCX - 17 KB)
- Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability
- Failures loading websites using TLS 1.3 with SSL inspection enabled
- Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
安全公告、响应和通知
- Field Notice: FN74062 - Cisco Firepower Management Center Software: MariaDB Database Might Become Unresponsive And Prevent User Login Access - Software Upgrade Recommended
- Field Notice: FN74004 - Firepower Software: Some Versions Of Vulnerability Database (VDB) Might Cause Excessive Memory Consumption And Traffic Loss For Some Secure Firewall Devices - Software Upgrade Recommended
- Field Notice: FN - 72550 - ASA and Firepower Software: Secure Firewall Appliance Might Traceback And Reload In A High Availability Configuration - Software Upgrade Recommended
- Field Notice: FN70549 - ASA5506, ASA5508, and ASA5516 Security Appliances - Some RMA Replacements Might Fail Due to a Rework Process Issue - Hardware Upgrade Available
- Field Notice: FN70476 - ASA5508 and ASA5516 Security Appliances Might Fail After 18 Months or Longer Due to a Damaged Component - Hardware Upgrade Available
- Field Notice: FN - 72548 - Firepower Software: Log Files Might Consume Excessive Disk Space - Software Upgrade Recommended
- Field Notice: FN - 72439 - ASA and FTD Software: Network Address Translation Might Become Disabled - Software Upgrade Recommended
- Field Notice: FN - 72501 - Firepower Software: Automatic Software Downloads And Content Updates Might Fail After January 10, 2023 - Software Upgrade Recommended
- Field Notice: FN - 72385 - Firepower Software: TCP Connections Disconnect When Idle Timeout is Configured - Software Upgrade Recommended
- Field Notice: FN - 72332 - Firepower Software: Cisco Talos Security Intelligence Updates Might Fail After March 5, 2022 - Software Upgrade Recommended
- Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided
- Field Notice: FN - 72019 - ASA 5506 Series Security Appliances - Some Appliances Might Fail to Pass Traffic After 3.2 Years Of Uptime - Power Cycle Required - Software Upgrade Recommended
- Field Notice: FN - 72105 - SUDI Certificate Expires When Registered to a PKI and Used to Configure Certain Functionalities on Cisco IOS and IOS XE Platforms - Workaround Provided
- Field Notice: FN - 70614 - ASR1001-X, ASR1001-HX, and ASR1002-HX Routers with ROMMON Version 17.3(1r) Will Not Be Downgradable to Earlier Versions - Workaround Provided
- Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended
问题信息通告（Field Notice）
-
版本和兼容性
- Cisco Secure Firewall Threat Defense Compatibility Guide
- Cisco Secure Firewall ASA Compatibility
- Supported VPN Platforms, Cisco Secure Firewall ASA Series
- 思科 Firepower 兼容性指南
兼容性信息
- Cisco Firepower Release Notes, Version 6.2.3 Patches
- Cisco Secure Firewall Device Manager New Features by Release
- Cisco Secure Firewall Management Center New Features by Release
- Release Notes for Cisco ASDM, 7.16(x)
- Release Notes for the Cisco ASA Series, 9.16(x)
- Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes
- Cisco Secure Firewall ASA New Features by Release
- Cisco Firepower Release Notes, Version 6.6
- Cisco Firepower Release Notes, Version 6.2.3
- Cisco Firepower Release Notes, Version 6.7
- Release Notes for the Cisco ASA Series, 9.14(x)
- Cisco Firepower Release Notes, Version 6.7.x Patches
- Cisco Firepower Release Notes, Version 6.3.0 Patches
- Cisco Firepower Release Notes, Version 6.5.0 Patches
- 思科 ASA 各版本的新功能
版本说明
-
参考
- show asp drop Command Usage
- Cisco Secure Firewall ASA Series Command Reference, A-H Commands
- Cisco Secure Firewall ASA Series Command Reference, S Commands
- Cisco Secure Firewall ASA Series Command Reference, I - R Commands
- Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM
- Cisco Cisco Secure Firewall Threat Defense 命令参考
命令参考
- Navigating the Cisco Secure Firewall Threat Defense Documentation
- Navigating the Cisco Secure Firewall ASA Series Documentation
- Start Here: Cisco ASA 5506H-X
- Welcome to the ASA 5508-X and ASA 5516-X
- Start Here: Cisco ASA 5506-X
文档目录
- Frequently Asked Questions (FAQ) about Licensing
- Cisco Secure Firewall ASA Series Feature Licenses
- Cisco Secure Firewall Management Center Feature Licenses
- Open Source Used In Cisco Firepower Version 6.3 (PDF - 19 MB)
- Open Source Used In Cisco Firepower Version 6.2.3 (PDF - 17 MB)
- Open Source Used In Cisco Firepower Version 6.2.2 (PDF - 15 MB)
- Open Source Used In FireSIGHT System Version 5.4.1.x (PDF - 7 MB)
- Open Source Used In Firepower System Version 6.1 (PDF - 14 MB)
- Open Source Used In Firepower System Version 6.2 (PDF - 14 MB)
- Open Source Used In Firepower System Version 6.0.1 (PDF - 11 MB)
- Open Source Used In Firepower System Version 6.0 (PDF - 12 MB)
许可信息
-
设计
-
安装和升级
- Cisco Secure Firewall Threat Defense Upgrade Guide for Cloud-delivered Firewall Management Center
- Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide
- Cisco Firepower 管理中心升级指南，版本 6.0–7.0
- Cisco Secure Firewall ASA to Threat Defense Feature Mapping
- Cisco Secure Firewall Threat Defense Upgrade Guide for Device Manager, Version 7.2
- Cisco Secure Firewall ASA 升级指南
- Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance
- Cisco ASA 5508-X and 5516-X Getting Started Guide
- Secure Firewall Management Center and Threat Defense Management Network Administration
- Cisco Firepower Threat Defense Upgrade Guide for Firepower Device Manager, Version 7.1
- Cisco ASA REST API Quick Start Guide
- Cisco Firepower 1100 入门指南
- 《Cisco Firepower 2100 入门指南》
- 《Cisco Firepower 1010 入门指南》
- Cisco Firepower 2100 系列硬件安装指南
安装和升级指南
-
配置
- Cisco Secure Firewall Management Center (Version 7.2 and later) and SecureX Integration Guide
- Firepower Management Center Configuration Guide, Version 6.0.1
- Cisco Secure Firewall Threat Defense and SecureX Integration Guide
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 7.0
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.7
- Firepower Management Center Configuration Guide, Version 6.5
- Cisco Secure Firewall ASA HTTP Interface for Automation
- Firepower Management Center Configuration Guide, Version 6.6
- CLI 书籍 1：思科 ASA 系列常规操作 CLI 配置指南，9.16
- Firepower Management Center Configuration Guide, Version 6.4
- Firepower Management Center Configuration Guide, Version 6.2.3
- Firepower Management Center Configuration Guide, Version 6.3
- Firepower Integrations Overview Guide
配置指南
-
Applicable to Multiple Models
-
提供 FirePOWER 服务的思科 ASA 5506-X 系列
- 在ASA平台上安装和配置FirePOWER服务模块
- 配置Active Directory与Firepower设备集成，以进行单点登录&；强制网络门户身份验证
- 在VMware ESXi上部署FireSIGHT管理中心
- 配置Firesight管理中心以显示每个访问规则的命中数
- 了解FirePOWER设备上的规则扩展
- 使用ASDM（现场管理）在FirePOWER模块上配置SSL解密
- 配置与ASDM的Active Directory集成，以实现单点登录和强制网络门户身份验证（机上管理）
- 通过ASDM（机上管理）配置FirePOWER模块中配置的备份/恢复
- 通过ASDM（现场管理）使用思科安全情报时配置IP黑名单
- 在Firepower模块中配置入侵策略和签名配置（机上管理）
- 使用ASDM在FirePOWER模块中安装补丁/更新（机上管理）
- 使用ASDM在Firepower模块中为系统/流量事件配置日志记录（机上管理）
- 无局域网交换的VPN隧道SFR模块管理
- 在Cisco FireSIGHT系统上配置SSL检查策略
配置示例和技术说明
-
故障排除
-
提供 FirePOWER 服务的思科 ASA 5506-X 系列
Support FAQ
-
-
资料
- 中小企业和分布式企业的NGFW 要求 (PDF - 479 KB)
白皮书
-
请登录以查看可下载的内容。
-
-
以下是具备FirePOWER服务的Cisco ASA 5500-X系列的型号：
除非另有说明，否则具备FirePOWER服务的Cisco ASA 5500-X系列的文档适用于所有型号。
此系列受思科支持，但现已停售，部分型号已停产：
- 采用FirePOWER服务的思科ASA 5506H-X系列
- 采用FirePOWER服务的思科ASA 5508-X系列
- 采用FirePOWER服务的思科ASA 5516-X系列
- 采用FirePOWER服务的思科ASA 5525-X系列
- 采用FirePOWER服务的思科ASA 5545-X系列
- 采用FirePOWER服务的思科ASA 5555-X系列
已淘汰的型号：
- 具备FirePOWER服务的Cisco ASA 5506-X -支持终止日期：2022年7月31日
- 具备FirePOWER服务的Cisco ASA 5506W-X -支持终止日期：2023年9月30日
- 具备FirePOWER服务的Cisco ASA 5512-X -支持终止日期：2022年8月31日
- 具备FirePOWER服务的Cisco ASA 5515-X -支持终止日期：2022年8月31日
- 带FirePOWER SSP-10的Cisco ASA 5585-X -支持终止日期：2022年8月31日
- 带FirePOWER SSP-20的Cisco ASA 5585-X -支持终止日期：2022年8月31日
- 带FirePOWER SSP-40的Cisco ASA 5585-X -支持终止日期：2022年8月31日
- 带FirePOWER SSP-60的Cisco ASA 5585-X -支持终止日期：2022年8月31日
