具備 FirePOWER 服務的思科 ASA 5500-X
意見- 思科下一代防火牆入門：
- 逐步指南：下一代防火牆設定
-
熱門搜尋結果
重要資料
客戶也檢視了
近期資安公告
- 06-Dec-2023
- 05-Oct-2023
- 03-Aug-2023
- 24-Jul-2023
- 24-Jul-2023
-
資料表和產品資訊
- Cisco ASA with FirePOWER Services
At-a-Glance
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 1 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.17(x), Adaptive Security Virtual Appliance (ASAv) Release 9.17(x) and Adaptive Security Device Manager (ASDM) Release 7.17(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.14(x), Adaptive Security Virtual Appliance (ASAv) Release 9.14(x) and Adaptive Security Device Manager (ASDM) Release 7.14(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance(ASA) 9.12(x) Adaptive Security Virtual Appliance(ASAv) 9.12(x) and Adaptive Security Device Manager(ASDM) 7.12(x)
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series Security Appliance & 5 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.8(x), Adaptive Security Virtual Appliance (ASAv) Release 9.8(x) and Adaptive Security Device Manager (ASDM) Release 7.8(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.15(x), Adaptive Security Virtual Appliance (ASAv) Release 9.15(x) and Adaptive Security Device Manager (ASDM) Release 7.15(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.13(x), Adaptive Security Virtual Appliance (ASAv) Release 9.13(x) and Adaptive Security Device Manager (ASDM) Release 7.13(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance software version 9.9.2
- End-of-Sale and End-of-Life Announcement for the Cisco 5506 FTD Appliance Series and Licenses
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.6(x), Adaptive Security Virtual Appliance (ASAv) Release 9.6(x) and Adaptive Security Device Manager (ASDM) Release 7.6(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.10(x) Adaptive Security Virtual Appliance (ASAv) Release 9.10(x) and Adaptive Security Device Manager (ASDM) Release 7.10(x)
- End-of-Sale and End-of-Life Announcement for the Cisco 512 MB Memory Upgrade for Cisco ASA 5505
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) 9.4(x) and Cisco Adaptive Security Device Manager (ASDM) 7.4(x)
產品停產與終止銷售通知
-
資安公告
- Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability
- Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability
- Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability
- Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability
- Software Advisory: Inoperable FTD Device/NetFlow Exporter after Reboot (CSCvv69991)
- Cisco Firepower Management Center Static Credential Vulnerabilities
- Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability
- Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability
- Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability
- Cisco Secure Boot Hardware Tampering Vulnerability
- SW_Advisory_AMP_cloud_infastructure_changes (PDF - 47 KB)
- SW_Advisory_CSCvj93913 (DOCX - 17 KB)
- Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability
- Failures loading websites using TLS 1.3 with SSL inspection enabled
- Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
安全建議、回應和注意事項
- Field Notice: FN74062 - Cisco Firepower Management Center Software: MariaDB Database Might Become Unresponsive And Prevent User Login Access - Software Upgrade Recommended
- Field Notice: FN74004 - Firepower Software: Some Versions Of Vulnerability Database (VDB) Might Cause Excessive Memory Consumption And Traffic Loss For Some Secure Firewall Devices - Software Upgrade Recommended
- Field Notice: FN - 72550 - ASA and Firepower Software: Secure Firewall Appliance Might Traceback And Reload In A High Availability Configuration - Software Upgrade Recommended
- Field Notice: FN70549 - ASA5506, ASA5508, and ASA5516 Security Appliances - Some RMA Replacements Might Fail Due to a Rework Process Issue - Hardware Upgrade Available
- Field Notice: FN70476 - ASA5508 and ASA5516 Security Appliances Might Fail After 18 Months or Longer Due to a Damaged Component - Hardware Upgrade Available
- Field Notice: FN - 72548 - Firepower Software: Log Files Might Consume Excessive Disk Space - Software Upgrade Recommended
- Field Notice: FN - 72439 - ASA and FTD Software: Network Address Translation Might Become Disabled - Software Upgrade Recommended
- Field Notice: FN - 72501 - Firepower Software: Automatic Software Downloads And Content Updates Might Fail After January 10, 2023 - Software Upgrade Recommended
- Field Notice: FN - 72385 - Firepower Software: TCP Connections Disconnect When Idle Timeout is Configured - Software Upgrade Recommended
- Field Notice: FN - 72332 - Firepower Software: Cisco Talos Security Intelligence Updates Might Fail After March 5, 2022 - Software Upgrade Recommended
- Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided
- Field Notice: FN - 72019 - ASA 5506 Series Security Appliances - Some Appliances Might Fail to Pass Traffic After 3.2 Years Of Uptime - Power Cycle Required - Software Upgrade Recommended
- Field Notice: FN - 72105 - SUDI Certificate Expires When Registered to a PKI and Used to Configure Certain Functionalities on Cisco IOS and IOS XE Platforms - Workaround Provided
- Field Notice: FN - 70614 - ASR1001-X, ASR1001-HX, and ASR1002-HX Routers with ROMMON Version 17.3(1r) Will Not Be Downgradable to Earlier Versions - Workaround Provided
- Field Notice: FN - 70050 - ASA5500-X with FirePOWER Services - FirePOWER Software v5.4.0.9 Can Cause Accelerated Wear of Solid-State Drives - Software Upgrade Recommended
欄位聲明
-
版本和相容性
- Cisco Secure Firewall Threat Defense Compatibility Guide
- Cisco Secure Firewall ASA Compatibility
- Supported VPN Platforms, Cisco Secure Firewall ASA Series
兼容性資料
- Cisco Firepower Release Notes, Version 6.2.3 Patches
- Cisco Secure Firewall Device Manager New Features by Release
- Cisco Secure Firewall Management Center New Features by Release
- Release Notes for Cisco ASDM, 7.16(x)
- Release Notes for the Cisco ASA Series, 9.16(x)
- Cisco Secure Firewall ASA New Features by Release
- Cisco Firepower Release Notes, Version 6.6
- Cisco Firepower Release Notes, Version 6.2.3
- Cisco Firepower Release Notes, Version 6.7
- Release Notes for the Cisco ASA Series, 9.14(x)
- Cisco Firepower Release Notes, Version 6.7.x Patches
- Cisco Firepower Release Notes, Version 6.3.0 Patches
- Cisco Firepower Release Notes, Version 6.5.0 Patches
- Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes
- Release Notes for the Cisco ASA Series REST API
發佈通知
-
參考
- show asp drop Command Usage
- Cisco Secure Firewall Threat Defense Command Reference
- Cisco Secure Firewall ASA Series Command Reference, A-H Commands
- Cisco Secure Firewall ASA Series Command Reference, S Commands
- Cisco Secure Firewall ASA Series Command Reference, I - R Commands
- Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM
指令參考
- Frequently Asked Questions (FAQ) about Licensing
- Cisco Secure Firewall ASA Series Feature Licenses
- Cisco Secure Firewall Management Center Feature Licenses
- Open Source Used In Cisco Firepower Version 6.3 (PDF - 19 MB)
- Open Source Used In Cisco Firepower Version 6.2.3 (PDF - 17 MB)
- Open Source Used In Cisco Firepower Version 6.2.2 (PDF - 15 MB)
- Open Source Used In FireSIGHT System Version 5.4.1.x (PDF - 7 MB)
- Open Source Used In Firepower System Version 6.1 (PDF - 14 MB)
- Open Source Used In Firepower System Version 6.2 (PDF - 14 MB)
- Open Source Used In Firepower System Version 6.0.1 (PDF - 11 MB)
- Open Source Used In Firepower System Version 6.0 (PDF - 12 MB)
授權資料
-
設計
-
安裝與升級
- Cisco Secure Firewall Threat Defense Upgrade Guide for Cloud-delivered Firewall Management Center
- Cisco Secure Firewall ASA Upgrade Guide
- Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide
- Cisco Secure Firewall ASA to Threat Defense Feature Mapping
- Cisco Secure Firewall Threat Defense Upgrade Guide for Device Manager, Version 7.2
- Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance
- Cisco ASA 5508-X and 5516-X Getting Started Guide
- Secure Firewall Management Center and Threat Defense Management Network Administration
- Cisco Firepower Threat Defense Upgrade Guide for Firepower Device Manager, Version 7.1
- Cisco ASA REST API Quick Start Guide
- Cisco Firepower Management Center Upgrade Guide, Version 6.0–7.0
- Cisco ASA REST API Quick Start Guide
- Cisco ASA FirePOWER Module Quick Start Guide
- Cisco ASA 5506-X Series Quick Start Guide
- Cisco Firepower Threat Defense for the ASA 5506-X Series Using Firepower Management Center Quick Start Guide
安裝和升級指南
-
設定
- Cisco Secure Firewall Management Center (7.0.2 and 7.2) and SecureX Integration Guide
- Firepower Management Center Configuration Guide, Version 6.0.1
- Cisco Firepower and SecureX Integration Guide
- Firepower and Cisco Threat Response Integration Guide
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 7.0
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6.0
- CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.16
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.7
- Firepower Management Center Configuration Guide, Version 6.5
- Cisco Secure Firewall ASA HTTP Interface for Automation
- Firepower Management Center Configuration Guide, Version 6.6
- Firepower Management Center Configuration Guide, Version 6.4
- Firepower Management Center Configuration Guide, Version 6.3
- Firepower Management Center Configuration Guide, Version 6.2.3
配置指南
-
Applicable to Multiple Models
-
具備 FirePOWER 服務的 Cisco ASA 5506-X
- 在 ASA 平台上安裝和設定 FirePOWER 服務模組
- 配置Active Directory與Firepower裝置的整合以實現單點登入&；強制網路門戶身份驗證
- 在VMware ESXi上部署FireSIGHT管理中心
- 配置Firesight管理中心以顯示每個訪問規則的命中次數
- 瞭解FirePOWER裝置上的規則擴展
- 使用ASDM（機箱內管理）在FirePOWER模組上配置SSL解密
- 配置Active Directory與ASDM的整合，以實現單點登入和強制網路門戶身份驗證（機箱內管理）
- 通過ASDM（機箱內管理）配置FirePOWER模組中配置的備份/恢復
- 通過ASDM使用思科安全情報時配置IP黑名單（機箱內管理）
- 在Firepower模組中配置入侵策略和簽名配置（機箱內管理）
- 使用ASDM配置網路AMP或檔案控制的FirePOWER模組。
- 使用ASDM在FirePOWER模組中安裝補丁/更新（機箱內管理）
- 使用ASDM（機箱內管理）配置系統/流量事件的Firepower模組日誌記錄
- 不含LAN交換器的VPN通道上的SFR模組管理
- 在Cisco FireSIGHT系統上配置SSL檢查策略
配置示例和技術筆記
-
疑難排解
-
具備 FirePOWER 服務的 Cisco ASA 5506-X
Support FAQ
- 使用ASDM管理ASA上的FirePOWER模組
- 排除Firepower威脅防禦(FTD)群集故障
- 通過Firepower服務處理單流大型會話（大象流）
- 使用ASDM（機箱內管理）在FirePOWER模組中配置基於域的安全智慧（DNS策略）
- Table of Contents: TAC Documents on FirePOWER Service, FireSIGHT System, and AMP
- 將資料從Firepower管理中心下載到受管裝置的准則
- 如何確定特定Snort例項處理的流量
- Troubleshoot Issues with URL Filtering on a FireSIGHT System
- ASA FirePOWER模組(SFR)使用ASDM對檔案生成過程進行故障排除（機箱內管理）
疑難排解技術筆記
-
-
文件
- Cisco Network Security Ordering Guide
Sales Resources
-
登入即可查看可下載的項目。
-
-
以下是具備FirePOWER服務的Cisco ASA 5500-X系列的型號：
除非另有說明，否則具備FirePOWER服務的Cisco ASA 5500-X系列的文檔適用於所有型號。
此系列受思科支援，但已不再銷售，某些型號已停產：
- 具備FirePOWER服務的Cisco ASA 5506H-X
- 具備FirePOWER服務的Cisco ASA 5508-X
- 具備FirePOWER服務的Cisco ASA 5516-X
- 具備FirePOWER服務的Cisco ASA 5525-X
- 具備FirePOWER服務的Cisco ASA 5545-X
- 具備FirePOWER服務的Cisco ASA 5555-X
已淘汰型號：
- 具備FirePOWER服務的Cisco ASA 5506-X -支援終止日期：2022年7月31日
- 具備FirePOWER服務的Cisco ASA 5506W-X -支援終止日期：2023年9月30日
- 具備FirePOWER服務的Cisco ASA 5512-X -支援終止日期：2022年8月31日
- 具備FirePOWER服務的Cisco ASA 5515-X -支援終止日期：2022年8月31日
- 具備FirePOWER SSP-10的Cisco ASA 5585-X -支援終止日期：2022年8月31日
- 具備FirePOWER SSP-20的Cisco ASA 5585-X -支援終止日期：2022年8月31日
- 具備FirePOWER SSP-40的Cisco ASA 5585-X -支援終止日期：2022年8月31日
- 具備FirePOWER SSP-60的Cisco ASA 5585-X -支援終止日期：2022年8月31日
