Navigating the Cisco Secure Firewall Threat Defense Documentation

About Cisco Secure Firewall Threat Defense Documentation

License Documentation

Top-Level Documentation Listing Pages for Management Center Deployments

The following documents may be helpful when configuring Secure Firewall Management Center deployments, Version 6.0+.


Note


Some of the linked documents are not applicable to Secure Firewall Management Center deployments. For example, some links on Secure Firewall Threat Defense pages are specific to deployments managed by Secure Firewall device manager, and some links on hardware pages are unrelated to management center. To avoid confusion, pay careful attention to document titles. Also, some documents cover multiple products and therefore may appear on multiple product pages.

Secure Firewall Management Center

Secure Firewall Threat Defense, also called NGFW (Next Generation Firewall) devices

Release Notes

Release notes provide critical and release-specific information.


Note


For ASA release notes, see the ASA documentation roadmap.

For FXOS release notes, see the FXOS documentation roadmap.

For Firepower hotfix release notes, see the Firepower Hotfix Release Notes.


Release

Guide

Version 7.6.0

Cisco Secure Firewall Threat Defense Release Notes, Version 7.6.0

Version 7.4.1

Cisco Secure Firewall Threat Defense Release Notes, Version 7.4.x

Version 7.4.0

Cisco Secure Firewall Threat Defense Release Notes, Version 7.4.x

Version 7.3.0

Cisco Secure Firewall Threat Defense Release Notes, Version 7.3.x

Version 7.2.0

Cisco Secure Firewall Threat Defense Release Notes, Version 7.2.x

Version 7.1.0

Cisco Firepower Release Notes, Version 7.1

Version 7.0.0

Cisco Firepower Release Notes, Version 7.0

Version 6.7.0

Version 6.6.0

Version 6.5.0

Version 6.4.0.x

Version 6.3.0.x

Version 6.2.3.x

Version 6.2.2.x

Version 6.2.1

Cisco Firepower Version 6.2.1 has been replaced by Cisco Firepower Version 6.2.2, which offers the same functionality and supports the full set of Firepower platforms; we strongly recommend updating to Version 6.2.2 in place of Version 6.2.1.

Version 6.2.0.x

Version 6.1.x

Version 6.0.1.x

Version 6.0.0.x

Migration Guides

Secure Firewall migration tool

You can use the Secure Firewall migration tool to migrate supported configurations to supported Secure Firewall Threat Defense confgurations for releases 6.2.3 and later.

For other related ASA to Threat Defense documents, see:

https://www.cisco.com/c/en/us/support/security/adaptive-security-appliance-asa-software/products-installation-guides-list.html

ASA-to-Firepower Threat Defense Migration Tool Image

The Cisco ASA to Firepower Threat Defense Migration Guide describes how to use Cisco’s migration tool to convert ASA configurations to Firepower Threat Defense configurations.


Note


This migration tool is deprecated and cannot migrate your ASA images to the latest Firepower Threat Defense releases.


Upgrade Guides

Configuration Guides

This section lists configuration guides by management device:


Note


For ASA configuration guides, see the ASA documentation roadmap.

For FXOS configuration guides, see the FXOS documentation roadmap.


Management Center

The management center configuration guides include detailed information on configuration using the management center web interface.

Release Guide

All Versions

Threat Defense on 4100 or 9300 hardware, managed by Management Center: Deploy a Cluster for Threat Defense on the Firepower 4100/9300.

Version 7.4/7.4.1

Version 7.4/7.4.1

Version 7.3

Version 7.2

Version 7.1

Version 7.0

Version 6.7.0

Version 6.6.0

Version 6.5.0

Version 6.4.0

Version 6.3.0

Version 6.2.3

Version 6.2.2

Version 6.2.1

Version 6.2.0.x

Version 6.1.x

Version 6.0.1.x

Version 6.0.0.x

ASA with FirePOWER Services Local Management via ASDM

On an ASA device running version 6.0+ of the ASA FirePOWER module, you can configure ASA FirePOWER module functionality via ASDM. The ASA with FirePOWER Services Local Management Configuration Guide provides information on configuring the module.

Release Guide

Version 7.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 7.0

Version 6.7.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.7

Version 6.6.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.6

Version 6.5.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.5

Version 6.4.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.4

Version 6.3.0

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.3

Version 6.2.3

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2.3

Version 6.2.2

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2.2

Version 6.2.0.x

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.2

Version 6.1.x

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.1

Version 6.0.1.x

No updates were made to the ASA FirePOWER Services Local Management Configuration Guide for Version 6.0.1; see Version 6.0 documentation set for applicable information.

Version 6.0.0.x

ASA with FirePOWER Services Local Management Configuration Guide, Version 6.0

Device Manager

Release Guide

Version 7.6

Cisco Secure Firewall Device Manager Configuration Guide, Version 7.6

Version 7.4

Cisco Secure Firewall Device Manager Configuration Guide, Version 7.4

Version 7.3

Cisco Secure Firewall Device Manager Configuration Guide, Version 7.4

Version 7.3

Cisco Secure Firewall Device Manager Configuration Guide, Version 7.3

Version 7.2

Cisco Secure Firewall Device Manager Configuration Guide, Version 7.2

Version 7.1

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 7.1

Version 7.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 7.0

Version 6.7.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.7.0

Version 6.6.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.6.0

Version 6.5.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.5.0

Version 6.4.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.4.0

Version 6.3.0

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.3.0

Version 6.2.3

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.3

Version 6.2.2

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.2

Version 6.2.1

Cisco Firepower Threat Defense Configuration Guide for Firepower Device Manager, Version 6.2.1

Version 6.2.0.x

Firepower Device Manager Configuration Guide, Version 6.2

Version 6.1.x

Firepower Device Manager Configuration Guide, Version 6.1

Configuration Examples and Tech Notes

Configuration examples are "how to" guides that provide an end-to-end example of the procedures required to complete a specific configuration. If the example requires configuration in more than one management application, such as Secure Firewall chassis manager and Secure Firewall Management Center the configuraton example includes the procedures for both management applications.

Snort 3 Inspector Reference

The Snort 3 Inspector Reference explains the options, rules, and best practices for configuring the Snort 3 inspectors.

Application Detector References for VDB Releases

Beginning with VDB Release 343, all application detector information is available through Secure Firewall Application Detectors. This site includes a searchable database of application detectors. The Release Notes provide an update on the newest VDB release.


Note


The Cisco Vulnerability Database Library for Firepower System provides links to the Cisco Firepower Application Detector Reference for VDB release 297-343.


Hardware Guides

This section contains the following topics:

Hardware Installation

These guides provide information about Firepower hardware, including deployment information, physical installation procedures, field-replaceable components, specifications, and safety and regulatory information.


Note


For virtual installation guides, see Quick Start and Getting Started Guides.

Firepower Hardware Installation Guides

ASA 5500-X Series Hardware Installation Guides

ISA 3000 Hardware Installation Guide

Regulatory Compliance and Safety Information

Quick Start and Getting Started Guides

Quick start and getting started guides provide information on deploying the appliance, procedures for installing your appliance on your network, initial setup and configuration, and reimaging an appliance. Virtual quick start guides include deployment, installation, and initial setup information for virtual environments.

Module

Guide

Management Center quick start guides

Threat Defense quick start guides for hardware (Management Center)

Threat Defense quick start guides for hardware (Device Manager)

Threat Defense quick start guides for virtual appliances

ASA FirePOWER module quick start guide

The ASA FirePOWER module runs a separate application from the ASA. Refer to the Cisco ASA FirePOWER Module Quick Start Guide for instructions on setting up the module on supported ASA devices.

For additional information on installation of supported ASA devices for use with Firepower, see the ASA documentation roadmap.

Firepower classic device quick start guides

Hardening Guides

Troubleshooting Guides and Articles

Links to troubleshooting Tech Notes and other troubleshooting resources are available under the "Troubleshooting and Alerts" heading on the top-level document listing page for each product on Cisco.com. See the links for your products in Top-Level Documentation Listing Pages for Management Center Deployments.

Troubleshooting guides are listed below:

Integration and API Documentation

Integration guides provide information on extending Firepower capabilities through custom application development using exposed APIs.

Release Guide

Version 7.4

Version 7.3

No updates were made to the following guides for Version 7.3. You can follow the guides listed below:

Version 7.2

No updates were made to the following guides for Version 7.2. You can follow the guides listed below:

Version 7.1

No updates were made to the following guides for Version 7.1. You can follow the guides listed below:

Version 7.0

No updates were made to the following guides for Version 7.0. You can follow the guides listed below:

Version 6.7.0

No updates were made to the following guides for Version 6.7. You can follow the guides listed below:

Version 6.6.0

No updates were made to the following guides for Version 6.6. You can follow the guides listed below:

Version 6.5.0

No updates were made to the following guides for Version 6.5. You can follow the guides listed below:

Version 6.4.0

No updates were made to the following guides for Version 6.4. You can follow the guides listed below:

Version 6.3.0

No updates were made to the following guides for Version 6.3. You can follow the guides listed below:

Version 6.2.3

No updates were made to the following guides for Version 6.2.3. You can follow the guides listed below:

Version 6.2.2

No updates were made to the following guides for Version 6.2.2. You can follow the guides listed below:

Version 6.2.1

No updates were made to the following guides for Version 6.2.1. You can follow the guides listed below:

Version 6.2.0.x

No updates were made to the following guides for Version 6.2. You can follow the guides listed below:

Version 6.1.x

No updates were made to the Host Input or Remediation API guides for Version 6.1. You can follow the guides listed below:

Version 6.0.1.x

No updates were made to the API documentation for Version 6.0.1; see Version 6.0 documentation.

Version 6.0.0.x

User Agent Documentation


Caution


The user agent is reaching its end of support period. Firepower Management Center version 6.6 is the last version with which you can enable the user agent. The user agent cannot be enabled in Firepower Management Center 6.7 and upgrades to 6.7 will warn you to disable the user agent before upgrading.


Release

Guide

Version 2.5

Cisco Firepower User Agent Configuration Guide, version 2.5

Version 2.4

Cisco Firepower User Agent Configuration Guide, version 2.4

Version 2.3

Firepower User Agent Configuration Guide, Version 2.3

Version 2.2.x

FireSIGHT System User Agent Configuration Guide, Version 2.2

FireSIGHT System User Agent Version 2.2 Release Notes

Additional Resources

The Firewalls Community is an exhaustive repository of reference material that complements our extensive documentation. This includes links to 3D models of our hardware, hardware configuration selector, product collateral, configuration examples, troubleshooting tech notes, training videos, lab and Cisco Live sessions, social media channels, Cisco Blogs and all the documentation published by the Technical Publications team.

Some of the individuals posting to community sites or video sharing sites, including the moderators, work for Cisco Systems. Opinions expressed on those sites and in any corresponding comments are the personal opinions of the original authors, not of Cisco. The content is provided for informational purposes only and is not meant to be an endorsement or representation by Cisco or any other party.


Note


Some of the videos, technical notes, and reference material in the Firewalls Community points to older versions of the management center. Your version of the management center and the version referenced in the videos or technical notes might have differences in the user interface that cause the procedures not to be identical.