โฆษณา
C O N T E N T S
C H A P T E R 1
C H A P T E R 2
C H A P T E R 3
Introduction to the Firepower Security Appliance 1
About the Firepower Security Appliance
1
Firepower Chassis Manager Overview
Monitoring the Chassis Status
2
Getting Started 5
Task Flow
5
Initial Configuration
6
Log In or Out of the Firepower Chassis Manager
8
Accessing the FXOS CLI
License Management 11
About Smart Software Licensing
11
Smart Software Licensing for Applications on the FXOS Chassis
Smart Software Manager and Accounts
12
Licenses and Devices Managed per Virtual Account
Device Registration and Tokens
Periodic Communication with the License Authority
13
Out-of-Compliance State
Smart Call Home Infrastructure
Prerequisites for Smart Software Licensing
Defaults for Smart Software Licensing
14
Configure Smart Software Licensing
(Optional) Configure the HTTP Proxy
Register the Firepower Security Appliance with the License Authority
15
Smart License Manager Satellite for the FXOS chassis
Configure a Smart License Satellite Server for the FXOS chassis
16
Permanent License Reservation
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1) iii
Contents
C H A P T E R 4
C H A P T E R 5
C H A P T E R 6
Configure Permanent License Reservation
(Optional) Return the FXOS Permanent License
17
History for Smart Software Licensing
18
User Management
19
User Accounts
Guidelines for Usernames
20
Guidelines for Passwords
21
Guidelines for Remote Authentication
User Roles
24
Password Profile for Locally Authenticated Users
Configuring User Settings
25
Set the Maximum Number of Login Attempts
27
Configure Minimum Password Length Check
28
Creating a Local User Account
29
Deleting a Local User Account
30
Activating or Deactivating a Local User Account
Image Management 33
About Image Management
33
Downloading Images from Cisco.com
34
Uploading an Image to the Firepower Security Appliance
Verifying the Integrity of an Image
Upgrading the Firepower eXtensible Operating System Platform Bundle
35
Updating the Image Version for a Logical Device
36
Firmware Upgrade
Security Certifications Compliance 39
Security Certifications Compliance
39
Enable FIPS Mode
40
Enable Common Criteria Mode
Generate the SSH Host Key
Configure IPSec Secure Channel
41
Configure Static CRL for a Trustpoint
46
About the Certificate Revocation List Check
47
iv
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1)
C H A P T E R 7
C H A P T E R 8
Set the LDAP Key Ring Certificate
51
System Administration 53
Changing the Management IP Address
53
Changing the Application Management IP
55
Pre-Login Banner
57
Creating the Pre-Login Banner
Modifying the Pre-Login Banner
58
Deleting the Pre-Login Banner
59
Rebooting the FXOS Chassis
Powering Off the FXOS Chassis
60
Install a Trusted Identity Certificate
Recovering from a Software Failure
65
Recovering from a Corrupted File System
69
Platform Settings 79
Setting the Date and Time
79
Viewing the Configured Date and Time
80
Setting the Time Zone
Setting the Date and Time Using NTP
Deleting an NTP Server
81
Setting the Date and Time Manually
Configuring SSH
82
Configuring Telnet
Configuring SNMP
83
About SNMP
SNMP Notifications
SNMP Security Levels and Privileges
84
Supported Combinations of SNMP Security Models and Levels
SNMPv3 Security Features
85
SNMP Support
Enabling SNMP and Configuring SNMP Properties
86
Creating an SNMP Trap
87
Deleting an SNMP Trap
88
Creating an SNMPv3 User
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1) v
C H A P T E R 9
Deleting an SNMPv3 User
89
Configuring HTTPS
Certificates, Key Rings, and Trusted Points
Creating a Key Ring
90
Regenerating the Default Key Ring
91
Creating a Certificate Request for a Key Ring
Creating a Certificate Request for a Key Ring with Basic Options
Creating a Certificate Request for a Key Ring with Advanced Options
92
Creating a Trusted Point
94
Importing a Certificate into a Key Ring
95
96
Changing the HTTPS Port
97
Deleting a Key Ring
98
Deleting a Trusted Point
Disabling HTTPS
99
Configuring AAA
About AAA
100
Configuring LDAP Providers
101
Configuring Properties for LDAP Providers
Creating an LDAP Provider
102
Deleting an LDAP Provider
104
Configuring RADIUS Providers
Configuring Properties for RADIUS Providers
Creating a RADIUS Provider
105
Deleting a RADIUS Provider
106
Configuring TACACS+ Providers
Configuring Properties for TACACS+ Providers
Creating a TACACS+ Provider
107
Deleting a TACACS+ Provider
108
Configuring Syslog
Configuring DNS Servers
111
Interface Management
113
About Firepower Security Appliance Interfaces
Interfaces Page
vi
C H A P T E R 1 0
Interface Types
114
Hardware Bypass Pairs
115
Jumbo Frame Support
116
Edit Interface Properties
Change the Administrative State of an Interface
Create a Port Channel
117
Configuring Breakout Cables
118
Logical Devices 121
About Logical Devices
121
Logical Devices Page
122
Create a Standalone Logical Device
123
Create a Standalone ASA Logical Device
Create a Standalone Threat Defense Logical Device
125
Deploy a Cluster
127
About Clustering on the FXOS Chassis
Primary and Secondary Unit Roles
Cluster Control Link
128
Size the Cluster Control Link for Inter-Chassis Clustering
Cluster Control Link Redundancy for Inter-Chassis Clustering
Cluster Control Link Reliability for Inter-Chassis Clustering
129
Cluster Control Link Network
Management Network
Management Interface
Spanned EtherChannels
130
Inter-Site Clustering
Prerequisites for Clustering
131
Guidelines for Clustering
132
Defaults for Clustering
135
Configure ASA Clustering
Configure Firepower Threat Defense Clustering
138
Examples for Inter-Site Clustering
140
Spanned EtherChannel Transparent Mode North-South Inter-Site Example
Spanned EtherChannel Transparent Mode East-West Inter-Site Example
141
History for Clustering
142
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1) vii
C H A P T E R 1 1
C H A P T E R 1 2
C H A P T E R 1 3
Configure Service Chaining
143
About Service Chaining
Prerequisites for Service Chaining
Guidelines for Service Chaining
Configure Radware DefensePro Service Chain on a Standalone Logical Device
144
Configure Radware DefensePro Service Chain on an Intra-Chassis Cluster
145
Open UDP/TCP Ports and Enable vDP Web Services
146
Manage Logical Devices
147
Connect to the Console of the Application or Decorator
Delete a Logical Device
148
Change the ASA to Transparent Firewall Mode
Change an Interface on a Firepower Threat Defense Logical Device
149
Change an Interface on an ASA Logical Device
150
Security Module/Engine Management 153
About FXOS Security Modules/Security Engine
153
Decommissioning/Recommissioning a Security Module
154
Acknowledging a Security Module/Engine
155
Resetting a Security Module/Engine
Reinitializing a Security Module/Engine
156
Powering On/Off a Security Module/Engine
Configuration Import/Export
159
About Configuration Import/Export
Exporting a Configuration File
160
Scheduling Automatic Configuration Export
161
Setting a Configuration Export Reminder
162
Importing a Configuration File
Packet Capture
165
About Packet Capture
Creating or Editing a Packet Capture Session
166
Configuring Filters for Packet Capture
168
Starting and Stopping a Packet Capture Session
169
Downloading a Packet Capture File
viii
ลิงก์สาธารณะไปยังแชทของคุณได้รับการอัปเดตแล้ว You may view and manage your chat links after registration here.
เข้าสู่ระบบเพื่อดำเนินการต่อ
