CHAPTER 6
ASA Appliance Mode Deployment with ASDM
Is This Chapter for You?
The Firepower 2100 runs an underlying operating system called the FXOS. You can run the Firepower 2100
for ASA in the following modes:
• Appliance mode (the default)—Appliance mode lets you configure all settings in the ASA. Only advanced
troubleshooting commands are available from the FXOS CLI. See the FXOS troubleshooting guide for
more information. The chassis manager is not supported.
• Platform mode—When in Platform mode, you must configure basic operating parameters and hardware
interface settings in FXOS. These settings include enabling interfaces, establishing EtherChannels, NTP,
image management, and more. You can use the chassis manager web interface or FXOS CLI. You can
then configure your security policy in the ASA operating system using ASDM or the ASA CLI.
This chapter describes how to deploy the Firepower 2100 in your network in ASA Appliance mode. By default,
the Firepower 2100 runs in Appliance mode; to use Platform mode, see ASA Platform Mode Deployment
with ASDM and Chassis Manager, on page 195. This chapter does not cover the following deployments, for
which you should refer to the ASA configuration guide:
• Failover
• CLI configuration
This chapter also walks you through configuring a basic security policy; if you have more advanced
requirements, refer to the configuration guide.
The Firepower 2100 hardware can run either ASA software or threat defense software. Switching between
ASA and threat defense requires you to reimage the device. See Reimage the Cisco ASA or Firepower Threat
Defense Device.
PrivacyCollection Statement—The Firepower 2100 does not require or actively collect personally-identifiable
information. However, you can use personally-identifiable information in the configuration, for example for
usernames. In this case, an administrator might be able to see this information when working with the
configuration or when using SNMP.
• About the ASA, on page 176
• End-to-End Tasks, on page 178
• Review the Network Deployment and Default Configuration, on page 179
• Cable the Device, on page 181
• Power on the Firewall, on page 182
Cisco Firepower 2100 Getting Started Guide
175