Firepower Management Center - FMC 101

[@gchan1299]

Thank you. It is a great video to introduce the full picture on Firepower 👏

[@shver6]

Thank you! I've been searching high and low for a video in FMC usage and yours provides just the detail and depth that I needed.

[@harshvardhanthapliyal4994]

Excellent.. I saw couple of Firepower videos on KZbin, but your video has covered most of the required details in single video. Thanks for the detailed info..

[@mooreas]

This is awesome! Could you do more like it? You sir are great to learn from

[@jasonmaynard8773]

Hi Mooreas - thanks for the feedback. I have a ton of videos available on my YT channel - cs.co/Jason_Maynard_KZbin_Channel

[@getanehmulualem9747]

Great explanation thank you

[@rcamacho100]

excellent, really good video

[@syedishtiyaq4165]

Many Thanks it was a great explanation really helpful. I think while creating Action Control Policy (ACP) we should first create (Add Category) and in that category we have to create the new rules in these way it will be more granular.

[@roadracer1584]

Are there any videos for setting up the FMC 1600 and Firepower 1100?

[@CiscoSystems]

The following video may be helpful to you: kzbin.info/www/bejne/rJDYi2x9l652eM0

[@MarcinDobija]

Excellent video! Thank you!

[@kronos1505]

Excellent video!!!!

[@hquest]

Hi Jason. Great series of videos, thank you for taking the time to make and publish them. I tried to get an interface of the sensor set as SPAN, but no traffic was getting out of the unit. I open a TAC for more details and in short, I heard the FTD cannot generate a SPAN port, and an ERSPAN port listens for SPAN traffic and it too doesn’t generate data. With that said, I’m curious on how this design of yours with a SPAN port was exporting traffic - unless I got it wrong and it is an import interface. Thanks again for your series of videos.

[@pavanrambatla]

Hi, Can you share other videos posted by Jason, thanks in advance Regards, Pavan

[@jasonmaynard8773]

Hi Alex, Thanks for the feedback. In regards to your question. The SPAN port is the source port on another device like a switch. Firepower receives this data on a passive port. Hope that clarifies.

[@julianoivan5381]

Would you demonstrate how the firepower prevent from attack like mallware or something

[@mp-vw5ce]

Very nicely done. Thank U!

[@jasonmaynard8773]

Thanks!

[@vishalmishra3340]

thank you !!

[@noneknwsbrah]

If you want to block certain URLs, what exactly is the monitor action going to accomplish that?

[@wsullivan]

FTD 101, is that coming soon? one of the best run throughs for FMC, well done!

[@CiscoSystems]

If you are looking for more content around Cisco Security technologies then check out Jason Maynard’s YT channel (includes FTD as well as other Cisco security technologies). cs.co/Jason_Maynard_KZbin_Channel

[@eriongega4338]

Hello, thnx for sharing this video, please if may I ask you how do you solve the feeds issue? Its un upper issue as you say on the video something upstream is blocking, if you let me know, cause i have this issue to in my lab. Thnx a lot again.

[@CiscoSystems]

Thanks for reaching out! Please log on to the Cisco Firewalls Community (cs.co/6052Kv1ae) where you can connect with experts and peers, and have your FMC questions answered. Have a great day!

[@arwabahij9430]

Great demo! Thanks a lot

[@Herospeed100]

my job is cyber security so i think i should add remote desk control on my pc to communicate with the company pc to add and removed any file malware ...etc even blocked the IP if they want, can you tell me which soft wear ...many thanks. Paul

[@CiscoSystems]

You can find out more about our services here: cs.co/6058KqWAo, thanks for your interest!

[@pja8901]

Great video. Thank you!.

[@ahmedalobaidy1]

Thank you very useful

[@ITxHURTSxWHENxIP]

Thanks for the video! Can you tell me what is 10.1.253.1 that you used as your default static route?

[@CiscoSystems]

We're glad you liked the video. 10.1.253.1 is the IP default gateway.

[@jasonmaynard8773]

An upstream device towards the internet. This is the route that is used to get to any (0.0.0.0) route that is not otherwise connected or defined

[@domagoj19zg]

how is network discovery dealing with assets that chages its IP address.. like PCs for instance?

[@CiscoSystems]

Hi there, we'd love to help! Please refer to this link: cs.co/6054KmZmk. Let us know if this helps.

[@murrad01]

great info!

[@flesz_]

Can I manage asa 5508-x without FMC and configure routing, ie BGP ? I was reading FDM is installed as default to manage it , but not sure if it supports routing configuration. I need to configure networking on a new site where there are no servers yet to install FMC on.

[@CiscoSystems]

Hi there. FMC is needed to configure ASA 5508-X. For more details, please refer to this discussion in the Cisco Community: community.cisco.com/t5/firewalls/asa-5508-x-ftd-asdm-fmc-limitations/td-p/3384009

[@edgvergara5278]

Ty for the video! is it possible to enable real time monitor in FMC?

[@CiscoSystems]

Unfortunately, this feature is not available in FMC. Please check out this Cisco Community thread for more details: community.cisco.com/t5/firewalls/firepower-threat-defense-real-time-log-viewer/td-p/2936567

[@SuperBowmans]

Can you configure load balancing on dual outside WAN interfaces?

[@dnaxt]

Nice overview

[@shaiksadulla9654]

Great content. Can anyone pls let me know the way of adding multiple subnets in single Network object? What if I want to group more than 10 network objects in a single group? Thanks

[@CiscoSystems]

Thank you for your feedback. Please log on to the Cisco Firewalls Community (community.cisco.com/t5/firewalls/bd-p/5966-discussions-firewalling) where you can connect with experts and peers, and have your FMC questions answered.

[@jonrandersen1440]

By now you probably know, but in case not you can indeed group 10 network objects (subnets or hosts) into a single group on the FMC. You can use ACLs to control access to many different subnets and hosts with object groups.

[@joseluismartins8340]

Hello Guys, I need some help please, I'm trying to configure FMC with "configure-network" after set the ip, mask and gateway parameters, I get error saying "unable to connect data-base at /path/PM_control.sock and this file is missing. When I check "pmtool status" i get pmtool:pmtool [ERROR] Unable to connect to UNIX socket at /var/sf/run/PM_Control.sock: No such file or directory

[@CiscoSystems]

There are many steps and troubleshooting alternatives to solve this issue. We suggest opening a discussion in the community so experts in the area can assist you. You may also open a TAC case. Additionally, this is an example of a similar case: community.cisco.com/t5/firewalls/ip-address-change-virtual-fmc/td-p/3002904 Cisco FMC has many tricks, so it’s most probably going to need many back & forwards to solve it. Here's a general guide that shows the best practices of FMC configuration: www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/vmware/fmcv/FMCv-quick/setup-mcvirtual.html. I hope you find this helpful.

[@jamesren4949]

"click on the link below", where is the link please?

[@CiscoSystems]

Hi James. The link is now in the video description.

[@ahmedmadibbo9362]

Helllo , it possible to share Images FMC and FTP , the old Link does't work

[@CiscoSystems]

Here is the link to the Cisco FMC, Ahmed: www.cisco.com/c/en/us/products/security/firepower-management-center/index.html?DTID=esoytb000259

[@solimanelgazar2575]

how to get firesight source

[@CiscoSystems]

Hi Soliman. You would purchase the product from Cisco now called FMC (Firepower Management Center) and then it would be available for download. If you want a trial, you'll need to reach out to your local Cisco account team (scroll down and click on 'Contact Cisco' here: www.cisco.com/c/en/us/products/security/firepower-management-center/index.html)

[@dimitrigural9583]

unfortunately I can push "like" button only one time :D

[@JenkinsAugustine]

798 Nigel Mews

[@romperstomper9371]

Honestly, this technology is rubbish. You can't do the simplest things with this crap. smartlicense, FMC & FTD-->rubbish

[@allach1772]

True most of the functions can be handled with Zscaler….Who uses DMZ anymore everything is cloud based now.

[@acloudsecninja]

Great Content! Thank you!

[@jasonmaynard8773]

Thanks!