C H A P T E R
1
Introduction to the Firepower Security Appliance
•
About the Firepower Security Appliance, page 1
•
Firepower Chassis Manager Overview, page 1
•
Monitoring the Chassis Status, page 2
About the Firepower Security Appliance
The Cisco FXOS chassis is a next-generation platform for network and content security solutions. The FXOS chassis is part of the Cisco Application Centric Infrastructure (ACI) Security Solution and provides an agile, open, secure platform that is built for scalability, consistent control, and simplified management.
The FXOS chassis provides the following features:
• Modular chassis-based security system — provides high performance, flexible input/output configurations, and scalability.
•
Firepower Chassis Manager
— graphical user interface provides streamlined, visual representation of current chassis status and simplified configuration of chassis features.
•
FXOS CLI
— provides command-based interface for configuring features, monitoring chassis status, and accessing advanced troubleshooting features.
• FXOS REST API — allows users to programmatically configure and manage their chassis.
Firepower Chassis Manager Overview
The Firepower eXtensible Operating System provides a web interface that makes it easy to configure platform settings and interfaces, provision devices, and monitor system status. The navigation bar at the top of the user interface provides access to the following:
• Overview — From the Overview page you can easily monitor the status of the Firepower chassis. For more information, see
Monitoring the Chassis Status, on page 2
.
• Interfaces — From the Interfaces page, you can view the status of the installed interfaces on the chassis, edit interface properties, enable or disable an interface, and create port channels. For more information, see
Interface Management, on page 113
.
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1)
1
Introduction to the Firepower Security Appliance
Monitoring the Chassis Status
• Logical Devices — From the Logical Devices page, you can create, edit, and delete logical devices. For more information, see
Logical Devices, on page 121
.
•
Security Modules/Security Engine
—
From the Security Modules/Security Engine page, you can view the status of and can perform various functions on a security module/engine, such as power cycling, reinitializing, acknowledging, and decommissioning. For more information, see
Security Module/Engine
Management, on page 153
.
•
Platform Settings
—
From the Platform Settings page, you can configure chassis settings for the following: date and time, SSH, SNMP, HTTPS, AAA, Syslog, and DNS. For more information, see
Platform
Settings, on page 79
.
• System Settings — From the System menu, you can manage the following settings:
◦ Licensing — From the Licensing page, you can configure Smart Call Home settings and register your Firepower chassis with the Licensing Authority. For more information, see
License
Management, on page 11
.
◦ Updates — From the Updates page, you can upload Platform Bundle and Application images to the
Firepower chassis. For more information, see
Image Management, on page 33
.
◦
User Management
—
From the User Management page you can configure user settings and define user accounts for the FXOS chassis. For more information, see
User Management, on page 19
.
Monitoring the Chassis Status
From the Overview page you can easily monitor the status of the FXOS chassis. The Overview page provides the following elements:
•
Device Information
—
The top of the Overview page contains the following information about the FXOS chassis:
◦
Chassis name
— shows the name assigned to the chassis during initial configuration.
◦ IP address — shows the management IP address assigned to the chassis during initial configuration.
◦ Model — shows the FXOS chassis model.
◦
Version
— shows the version number of the FXOS running on the chassis.
◦ Operational State — shows the operable status for the chassis.
◦ Chassis uptime — shows the elapsed time since the system was last restarted.
◦
Shutdown button
— gracefully shuts down the FXOS chassis (see
Powering Off the FXOS Chassis,
on page 60 ).
Note
You can power on/off a security module/engine from the Security Modules/Security
Engine page (see
Powering On/Off a Security Module/Engine, on page 156
).
◦ Reboot button — gracefully shuts down the FXOS chassis (see
Rebooting the FXOS Chassis, on
page 59 ).
2
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1)
Introduction to the Firepower Security Appliance
Monitoring the Chassis Status
Note
You can reset a security module/engine from the Security Modules/Security Engine page (see
Resetting a Security Module/Engine, on page 155
).
◦
Uptime Information Icon
— hover over the icon to see uptime for the chassis and for any installed security module/engine.
•
Visual Status Display
—
Below the Device Information section is a visual representation of the chassis that shows the components that are installed in the chassis and provides a general status for those components. You can hover over the ports that are shown in the Visual Status Display to get additional information such as interface name, speed, type, admin state, and operational state. For models with multiple security modules, you can hover over the security modules that are shown in the Visual Status
Display to get additional information such as device name, template type, admin state, and operational state.
•
Detailed Status Information
—
Below the Visual Status Display is a table containing detailed status information for the chassis. The status information is broken up into five sections: Faults, Interfaces,
Devices, License, and Inventory. You can see a summary for each of those sections above the table and you can see additional details for each of those sections by clicking on the summary area for the information you want to view.
The system provides the following detailed status information for the chassis:
◦ Faults — Lists the faults that have been generated in the system. The faults are sorted by severity:
Critical, Major, Minor, Warning, and Info. For each fault that is listed, you can see the severity, a description of the fault, the cause, the number of occurrences, and the time of the most recent occurrence. You can also see whether the fault has been acknowledged or not.
You can click on any of the faults to see additional details for the fault or to acknowledge the fault.
Note
Once the underlying cause of the fault has been addressed, the fault will automatically be cleared from the listing during the next polling interval. If a user is working on a resolution for a specific fault, they can acknowledge the fault to let other users know that the fault is currently being addressed.
◦
Interfaces
—
Lists the interfaces installed in the system. The
All Interfaces
tab shows the interface name, operational status, administrative status, number of received bytes, and number of transmitted bytes. The
Hardware Bypass
tab shows only interface pairs that are supported for the Hardware
Bypass feature on the Firepower Threat Defense application. For each pair, the operational state is shown: disabled (Hardware Bypass is not configured for the pair), standby (Hardware Bypass is configured, but not currently active), and bypass (actively in Hardware Bypass).
◦ Devices — Lists the logical devices configured in the system and provides the following details for each logical device: device name, device state, application template type, operational state, administrative state, image version, management IP address, and ASDM URL.
◦ License — Shows whether smart licensing is enabled, provides the current registration status of your Firepower license, and shows license authorization information for the chassis.
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1)
3
Introduction to the Firepower Security Appliance
Monitoring the Chassis Status
◦ Inventory — Lists the components installed in the chassis and provides relevant details for those components, such as: component name, number of cores, installation location, operational status, operability, capacity, power, thermal, serial number, model number, part number, and vendor.
4
Cisco FXOS Firepower Chassis Manager Configuration Guide, 2.0(1)
