Deploy Cisco FirePOWER Management Center (Appliance)
Nov30

Deploy Cisco FirePOWER Management Center (Appliance)

KB ID 0001263 Problem You have been able to manage your firewalls Internal SFR module for  while using the ASDM Setup FirePOWER Services (for ASDM) For most people that’s fine, but if you have a lot of FirePOWER devices to manage that does not scale well. In those cases you should use theFMC  (FirePOWER Management Center). Here ‘Im going to use the Vmware virtual appliance, (at time of writing there is no Hyper-V version)....

Read More
Cisco SFR Session – Cannot Exit To Command Line
Nov22

Cisco SFR Session – Cannot Exit To Command Line

KB ID 0001259 Problem This tripped me up once before, and I didn’t document it! Normally if you have a console session open with your FirePOWER Module, (that you opened with a ‘session sfr’ command), then you can just quit, and exit back to the firewall by typing ‘exit’, like so; ciscoasa# session sfr Opening command session with module sfr. Connected to module sfr. Escape character sequence is...

Read More
Cisco – Cannot Connect to the ASA FirePOWER Module
May10

Cisco – Cannot Connect to the ASA FirePOWER Module

KB ID 0001182 Problem There’s an alarming amount of people who have contacted me about this error; Cannot connect the the ASA FirePOWER module. Cannot connect the the ASA FirePOWER module.. Check that it is correctly configured and on the network. It’s also possible that the management address is being translated by NAT. Please verify the IP address/Hostname and port. Note: If you have just updated or re-imaged the SFR...

Read More
Cisco Add FirePOWER Module to FirePOWER Management Center
Apr25

Cisco Add FirePOWER Module to FirePOWER Management Center

KB ID 0001178  Problem If you only have one FirePOWER service module you can now manage it from the ASDM; ASA 5505-X / 5508-X Setup FirePOWER Services (for ASDM) But if you have got more than one, and you can manage them centrally with the FirePOWER Management Center, (formally SourceFIRE Defence Center).  WARNING:  If you are going to use FMC DON’T register your licences in the ASDM, they all need to be registered in the FMC.  ...

Read More

Cisco FirePOWER SFR Module Cannot Ping

KB ID 0001174  Problem On a newly deployed FirePOWER service module I wanted to test connectivity and attempted to ping a public IP address. This is what happened; > expert admin@Petes-SFR:~$ ping 8.8.8.8 ping: icmp open socket: Operation not permitted My first though was, “Well you have to set a default gateway on the SFR when you set it up, so the firewall is probably blocking ICMP”. So I checked the default policy...

Read More
Cisco Firepower Services – Change IP and DNS Addresses
Apr07

Cisco Firepower Services – Change IP and DNS Addresses

KB ID 0001173  Problem If you change your internal LAN addresses its easy to re-ip the firewall but what about the FirePOWER module? If you manage your SFR from the ASDM it will tell you what the IP is, but it won’t let you change it?   Solution Change the FirePOWER Module IP Address Log into the firewall, then open a session with the SFR module. find the physical address of the module (usually eth0, but check). Petes-ASA#...

Read More
Cisco FirePOWER – Adding a Static Route
Apr05

Cisco FirePOWER – Adding a Static Route

KB ID 0001172 Problem Routing traffic back from the ASA , in most cases you will have a static route (or routes) tied to the inside interface of the firewall. Or you may have dynamic routing if your network is a little more complex. But your FirePOWER module is essentially a small Linux box sat inside the firewall, it has its own network connection and maintains its own routing table. You may have already noticed if your FirePOWER...

Read More
Re-Image and Update the Cisco FirePOWER Services Module
Mar03

Re-Image and Update the Cisco FirePOWER Services Module

KB ID 0001164 Problem This takes ages! Seriously, if it’s late in the afternoon you might want to do this tomorrow morning, or leave the re-imaging running overnight. (Remember if you set the FirePOWER module to ‘fail-closed’, you will lose internet access, so you might want to change that to ‘fail-open’ as well). The process is a LOT EASIER to do in the ASDM, I’m not usually an advocate of the GUI,...

Read More
Cisco FirePOWER – Update Fails ‘Peer Registration Failed: Registration in Progress’
Mar02

Cisco FirePOWER – Update Fails ‘Peer Registration Failed: Registration in Progress’

KB ID 0001162  Problem If you attempt to perform an update on the FirePOWER services module in your firewall, you may see the following error; Error Installation Failed: Peer registration in progress. Please retry in a few moments I found myself in this situation because I’d attempted to register the firewall in the FirePOWER Management Center Appliance, and the process failed, (because the versions were different). So when I...

Read More