Cisco Firepower 4110 User Manual

Cisco Preparative Procedures & Operational User Guide
© 2016 Cisco Systems, Inc. All rights reserved.
Firepower-chassis /security/radius # create server server-name
4) (Optional) Specify the port used to communicate with the RADIUS server.
Firepower-chassis /security/radius/server # set authport authport-num
5) Set the RADIUS server key:
Firepower-chassis /security/radius/server # set key
To set the key value, press Enter after typing the set key command and enter the key value at the
prompt.
6) (Optional) Specify when in the order this server will be tried:
Firepower-chassis /security/radius/server # set order order-num
7) (Optional) Set the number of times to retry communicating with the RADIUS server before noting the
server as down:
Firepower-chassis /security/radius/server # set retries retry-num
8) Specify the time interval that the system should wait for a response from the RADIUS server before
noting the server as down:
Firepower-chassis /security/radius/server # set timeout seconds
9) Commit the transaction to the system configuration:
Firepower-chassis /security/radius/server # commit-buffer
4.4.5 Configure TACACS+ via CLI
1) Enter security mode:
Firepower-chassis# scope security
2) Enter security TACACS+ mode:
Firepower-chassis /security # scope tacacs
3) Create a TACACS+ server instance and enter security TACACS+ server mode:
Firepower-chassis /security/tacacs # create server server-name
4) Specify the TACACS+ server key:
Firepower-chassis /security/tacacs/server # set key
To set the key value, press Enter after typing the set key command and enter the key value at the
prompt.
5) (Optional) Specify when in the order this server will be tried:
Firepower-chassis /security/tacacs/server # set order order-num
6) Specify the time interval that the system should wait for a response from the TACACS+ server before
noting the server as down:
Firepower-chassis /security/tacacs/server # set timeout seconds
7) (Optional) Specify the port used to communicate with the TACACS+ server:
Firepower-chassis /security/tacacs/server # set port port-num

Cisco Firepower 4110 Specifications

General

Power Supply	Dual, hot-swappable
Form Factor	1RU
Firewall Throughput (Multiprotocol)	10 Gbps
Number of 10GE (SFP+) Interfaces	8
Number of 40GE (QSFP+) Interfaces	2
Redundant Power Supply	Yes
Memory	32 GB
Ports	8 x 10GE, 2 x 40GE
Concurrent Sessions	8 Million
Number of 10/100/1000 Interfaces	8
Maximum Connections	8 Million
Management Ports	1 x RJ45
Data Ports	8 x 10GE, 2 x 40GE
Processor	Intel Xeon E5-2600

Summary

Introduction and Operational Environment

1.1 Common Criteria Evaluated Configuration

Defines requirements for a secure system deployment under Common Criteria.

2.1 Operational Environment Components

Lists essential system components like management workstations and servers.

2.2 Environmental Assumptions

Specifies expected conditions for the operational environment and administrators.

Assurance Activity Configuration

4.1 Logging into the Appliance

Guides users on accessing the Firepower Chassis Manager via web or CLI.

4.3 Enable FIPS and CC Mode

Details enabling FIPS and Common Criteria modes for enhanced security compliance.

4.4 Configure Secure Connections

Covers secure connections using Syslog, LDAP, RADIUS, TACACS+, and IPsec.

System Management and Configuration

4.5.1 IP Management and Pre-Login Banner

Covers changing management IP addresses and setting pre-login banners.

4.5.2 Image Management

Explains managing platform bundle and application images for FXOS chassis.

4.5.3 User and Role Management

Details user account creation, roles, and authentication service selection.

4.5.6 Configure PKI

Describes Public Key Infrastructure configuration for HTTPS and IPsec.

System Self-Tests

4.6 Self-Tests

Details FIPS 140-2 self-tests during power-up and potential failure scenarios.