Cisco ASA 5500-X with FirePOWER Services
피드백- Cisco Secure Firewall 시작하기:
- 단계별 가이드:
- 데이터 센터 방화벽 운영 안내 리소스 | 인터넷 에지 보호 가이드 리소스
- Cisco Secure Firewall 설정 가이드 | 전문가에게 라이브 세션 확인 | NGFW(Next-Generation Firewall) 교육 비디오
-
상위 검색 결과
주요 정보
다른 고객들이 살펴본 항목
최근 보안 알림
- 07-Jun-2024
- 06-Dec-2023
- 05-Oct-2023
- 03-Aug-2023
- 24-Jul-2023
문서 카테고리
-
데이터 시트 및 제품 정보
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 1 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.17(x), Adaptive Security Virtual Appliance (ASAv) Release 9.17(x) and Adaptive Security Device Manager (ASDM) Release 7.17(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.14(x), Adaptive Security Virtual Appliance (ASAv) Release 9.14(x) and Adaptive Security Device Manager (ASDM) Release 7.14(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance(ASA) 9.12(x) Adaptive Security Virtual Appliance(ASAv) 9.12(x) and Adaptive Security Device Manager(ASDM) 7.12(x)
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series Security Appliance & 5 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco ASA5525, ASA5545 & ASA5555 Series 3 YR Subscriptions
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.8(x), Adaptive Security Virtual Appliance (ASAv) Release 9.8(x) and Adaptive Security Device Manager (ASDM) Release 7.8(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.15(x), Adaptive Security Virtual Appliance (ASAv) Release 9.15(x) and Adaptive Security Device Manager (ASDM) Release 7.15(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.13(x), Adaptive Security Virtual Appliance (ASAv) Release 9.13(x) and Adaptive Security Device Manager (ASDM) Release 7.13(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance software version 9.9.2
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.6(x), Adaptive Security Virtual Appliance (ASAv) Release 9.6(x) and Adaptive Security Device Manager (ASDM) Release 7.6(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Release 9.10(x) Adaptive Security Virtual Appliance (ASAv) Release 9.10(x) and Adaptive Security Device Manager (ASDM) Release 7.10(x)
- End-of-Sale and End-of-Life Announcement for the Cisco 512 MB Memory Upgrade for Cisco ASA 5505
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) 9.4(x) and Cisco Adaptive Security Device Manager (ASDM) 7.4(x)
- End-of-Sale and End-of-Life Announcement for the Cisco Adaptive Security Appliance (ASA) Software Release 9.7 and Cisco Adaptive Security Device Manager (ASDM) Software Release 7.7
EoL (End-of-Life) 및 EoS (End-of-Sale) 알림
-
보안 알림
- Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Client Denial of Service Vulnerability
- Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software VPN Authorization Bypass Vulnerability
- Cisco FirePOWER Software for ASA FirePOWER Module, Firepower Management Center Software, and NGIPS Software SNMP Default Credential Vulnerability
- Cisco FirePOWER Software for ASA FirePOWER Module Command Injection Vulnerability
- Software Advisory: Inoperable FTD Device/NetFlow Exporter after Reboot (CSCvv69991)
- Cisco Firepower Management Center Static Credential Vulnerabilities
- Cisco Firepower Threat Defense Software HTTP Filtering Bypass Vulnerability
- Cisco Firepower Threat Defense Software Stream Reassembly Bypass Vulnerability
- Cisco Firepower Threat Defense Software NULL Character Obfuscation Detection Bypass Vulnerability
- Cisco Secure Boot Hardware Tampering Vulnerability
- SW_Advisory_AMP_cloud_infastructure_changes (PDF - 47 KB)
- SW_Advisory_CSCvj93913 (DOCX - 17 KB)
- Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability
- Failures loading websites using TLS 1.3 with SSL inspection enabled
- Multiple Vulnerabilities in Wi-Fi Protected Access and Wi-Fi Protected Access II
보안 권고, 응답 및 알림
- Field Notice: FN74153 - ASA Software: Secure Firewall Appliance Lina Process Might Traceback And Reload - Software Upgrade Recommended
- Field Notice: FN74062 - Cisco Firepower Management Center Software: MariaDB Database Might Become Unresponsive And Prevent User Login Access - Software Upgrade Recommended
- Field Notice: FN74004 - Firepower Software: Some Versions Of Vulnerability Database (VDB) Might Cause Excessive Memory Consumption And Traffic Loss For Some Secure Firewall Devices - Software Upgrade Recommended
- Field Notice: FN - 72550 - ASA and Firepower Software: Secure Firewall Appliance Might Traceback And Reload In A High Availability Configuration - Software Upgrade Recommended
- Field Notice: FN70549 - ASA5506, ASA5508, and ASA5516 Security Appliances - Some RMA Replacements Might Fail Due to a Rework Process Issue - Hardware Upgrade Available
- Field Notice: FN70476 - ASA5508 and ASA5516 Security Appliances Might Fail After 18 Months or Longer Due to a Damaged Component - Hardware Upgrade Available
- Field Notice: FN - 72548 - Firepower Software: Log Files Might Consume Excessive Disk Space - Software Upgrade Recommended
- Field Notice: FN - 72439 - ASA and FTD Software: Network Address Translation Might Become Disabled - Software Upgrade Recommended
- Field Notice: FN - 72501 - Firepower Software: Automatic Software Downloads And Content Updates Might Fail After January 10, 2023 - Software Upgrade Recommended
- Field Notice: FN - 72385 - Firepower Software: TCP Connections Disconnect When Idle Timeout is Configured - Software Upgrade Recommended
- Field Notice: FN - 72332 - Firepower Software: Cisco Talos Security Intelligence Updates Might Fail After March 5, 2022 - Software Upgrade Recommended
- Field Notice: FN - 72212 - ASA 5500-X - Sustained Burst Of Connection Requests Might Cause Overallocation Of DMA Memory - Workaround Provided
- Field Notice: FN - 72019 - ASA 5506 Series Security Appliances - Some Appliances Might Fail to Pass Traffic After 3.2 Years Of Uptime - Power Cycle Required - Software Upgrade Recommended
- Field Notice: FN - 72105 - SUDI Certificate Expires When Registered to a PKI and Used to Configure Certain Functionalities on Cisco IOS and IOS XE Platforms - Workaround Provided
- Field Notice: FN - 70614 - ASR1001-X, ASR1001-HX, and ASR1002-HX Routers with ROMMON Version 17.3(1r) Will Not Be Downgradable to Earlier Versions - Workaround Provided
현장 알림
-
릴리스 및 호환성
- Cisco Secure Firewall Management Center New Features by Release
- Cisco Secure Firewall ASA New Features by Release
- Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes
- Cisco Secure Firewall Threat Defense/Firepower Hotfix Release Notes
- Cisco Firepower Release Notes, Version 6.2.3 Patches
- Cisco Secure Firewall Device Manager의 릴리스별 새로운 기능
- Release Notes for Cisco ASDM, 7.16(x)
- Release Notes for the Cisco ASA Series, 9.16(x)
- Cisco Firepower Release Notes, Version 6.2.3
- Cisco Firepower Release Notes, Version 6.7
- Release Notes for the Cisco ASA Series, 9.14(x)
- Cisco Firepower Release Notes, Version 6.6
- Cisco Firepower Release Notes, Version 6.7.x Patches
- Cisco Firepower Release Notes, Version 6.3.0 Patches
- Cisco Firepower Release Notes, Version 6.5.0 Patches
릴리스 정보
-
참조
- Cisco Secure Firewall ASA Series Feature Licenses
- 라이선싱에 대한 FAQ(자주 묻는 질문)
- Cisco Secure Firewall Management Center 기능 라이선스
- Open Source Used In Cisco Firepower Version 6.3 (PDF - 19 MB)
- Open Source Used In Cisco Firepower Version 6.2.3 (PDF - 17 MB)
- Open Source Used In Cisco Firepower Version 6.2.2 (PDF - 15 MB)
- Open Source Used In FireSIGHT System Version 5.4.1.x (PDF - 7 MB)
- Open Source Used In Firepower System Version 6.1 (PDF - 14 MB)
- Open Source Used In Firepower System Version 6.2 (PDF - 14 MB)
- Open Source Used In Firepower System Version 6.0.1 (PDF - 11 MB)
- Open Source Used In Firepower System Version 6.0 (PDF - 12 MB)
라이선싱 정보
- Cisco Secure Firewall ASA Series Command Reference, T - Z Commands and IOS Commands for ASASM
- show asp drop Command Usage
- Cisco Secure Firewall Threat Defense Command Reference
- Cisco Secure Firewall ASA Series Command Reference, S Commands
- Cisco Secure Firewall ASA Series Command Reference, I - R Commands
- Cisco Secure Firewall ASA Series Command Reference, A-H Commands
- show asp drop 명령 사용법
- Firepower Threat Defense용 명령 참조 (PDF - 14 MB)
명령 참조
-
설계
-
설치 및 업그레이드
- Cisco Secure Firewall ASA Upgrade Guide
- Cisco Secure Firewall ASA and Secure Firewall Threat Defense Reimage Guide
- Cisco Secure Firewall Threat Defense Upgrade Guide for Cloud-delivered Firewall Management Center
- Cisco Secure Firewall ASA에서 위협 방어 기능으로 매핑
- Cisco Secure Firewall Threat Defense Upgrade Guide for Device Manager, Version 7.2
- Migrating from the Cisco ASA 5500 to the Cisco Adaptive Security Virtual Appliance
- Cisco ASA 5508-X and 5516-X Getting Started Guide
- Secure Firewall Management Center and Threat Defense Management Network Administration
- Cisco Firepower Threat Defense Upgrade Guide for Firepower Device Manager, Version 7.1
- FMC를 사용하여 원격 지사에 FTD 구축
- Cisco ASA REST API Quick Start Guide
- Cisco Firepower Management Center Upgrade Guide, Version 6.0–7.0
- Cisco ASA FirePOWER Module Quick Start Guide
- Cisco ASA 5506-X Series Quick Start Guide
- Cisco Firepower Threat Defense for the ASA 5506-X Series Using Firepower Management Center Quick Start Guide
설치 및 업그레이드 가이드
-
컨피그레이션
- Cisco Secure Firewall Threat Defense and Cisco XDR Integration Guide
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.4
- Firepower Management Center Configuration Guide, Version 6.0.1
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 7.0
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6
- CLI Book 1: Cisco ASA Series General Operations CLI Configuration Guide, 9.16
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0
- Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.7
- Firepower Management Center Configuration Guide, Version 6.5
- Cisco Secure Firewall ASA HTTP Interface for Automation
- Cisco Secure Firewall ASA NetFlow Implementation Guide
- Firepower Management Center Configuration Guide, Version 6.6
- Firepower Management Center Configuration Guide, Version 6.4
- Firepower Management Center Configuration Guide, Version 6.2.3
- Firepower Management Center Configuration Guide, Version 6.3
컨피그레이션 가이드
- ASA 플랫폼에 FirePOWER Services 모듈 설치 및 설정
- Single-Sign-On & 종속 포털 인증을 위해 Active Directory와 Firepower 어플라이언스 통합 구성
- VMware ESXi에 FireSIGHT Management Center 구축
- 액세스 규칙당 적중 횟수를 표시하도록 Firesight Management Center 구성
- firepower 디바이스의 규칙 확장 이해
- ASDM(온박스 관리)을 사용하여 FirePOWER Module에서 SSL 암호 해독 구성
- 단일 로그인 및 종속 포털 인증을 위한 ASDM과의 Active Directory 통합 구성(온박스 관리)
- ASDM을 통해 FirePOWER 모듈에서 컨피그레이션 백업/복원 구성(온박스 관리)
- ASDM을 통해 Cisco Security Intelligence를 사용하는 동안 IP 블랙리스트 구성(온박스 관리)
- Firepower Module(온박스 관리)에서 침입 정책 및 시그니처 컨피그레이션 구성
- ASDM을 사용하여 네트워크 AMP 또는 파일 제어를 위한 Firepower 모듈을 구성합니다.
- ASDM을 사용하여 FirePOWER 모듈의 패치/업데이트 설치(온박스 관리)
- ASDM을 사용하여 시스템/트래픽 이벤트에 대한 Firepower 모듈의 로깅 구성(온박스 관리)
- LAN 스위치가 없는 VPN 터널을 통한 SFR 모듈 관리
- Cisco FireSIGHT 시스템에 SSL 검사 정책 구성
컨피그레이션 예시 및 기술 노트
-
문제 해결
- ASDM을 사용하여 ASA에서 Firepower 모듈 관리
- FTD(Firepower 위협 방어) 클러스터 문제 해결
- FirePOWER Services의 단일 스트림 대형 세션(코끼리 흐름) 처리
- Configure Domain Based Security Intelligence (DNS Policy) in FirePOWER Module With ASDM (On-Box Management)
- 목차: FirePOWER Service, FireSIGHT System, AMP에 대한 TAC 문서
- Guidelines for Downloading Data from the Firepower Management Center to Managed Devices
- How to Determine Traffic Handled by a Specific Snort Instance
- FireSIGHT 시스템에서 URL 필터링 문제 해결
- ASA SFR(Firepower 모듈) ASDM(온박스 관리)을 사용하여 파일 생성 절차 트러블슈팅
문제 해결 기술 노트
-
문서
-
로그인하여 사용 가능한 다운로드를 확인하십시오.
-
-
다음은 Firepower 서비스 시리즈가 포함된 Cisco ASA 5500-X의 모델입니다.
지정하지 않는 한 Cisco ASA 5500-X with Firepower Services Series에 대한 설명서는 모든 모델에 적용됩니다.
이 시리즈는 Cisco에서 지원하지만 더 이상 판매되지 않으며 일부 모델은 단종되었습니다.
- Cisco ASA 5506H-X with Firepower Services
- Cisco ASA 5508-X with Firepower Services
- Cisco ASA 5516-X with Firepower Services
- Cisco ASA 5525-X with Firepower Services
- Cisco ASA 5545-X with Firepower Services
- Cisco ASA 5555-X with Firepower Services
사용 중단된 모델:
- Cisco ASA 5506-X with Firepower Services - 지원 종료일: 2022년 7월 31일
- Cisco ASA 5506W-X(Firepower 서비스 포함) - 지원 종료일: 2023년 9월 30일
- Cisco ASA 5512-X with Firepower Services - 지원 종료일: 2022년 8월 31일
- Cisco ASA 5515-X with Firepower Services - 지원 종료일: 2022년 8월 31일
- Cisco ASA 5585-X(Firepower SSP-10 포함) - 지원 종료일: 2022년 8월 31일
- Cisco ASA 5585-X(Firepower SSP-20 포함) - 지원 종료일: 2022년 8월 31일
- Cisco ASA 5585-X(Firepower SSP-40 포함) - 지원 종료일: 2022년 8월 31일
- Cisco ASA 5585-X(Firepower SSP-60 포함) - 지원 종료일: 2022년 8월 31일
