- Cisco ASA with FirePOWER Services Local Management Configuration Guide
- Introduction to the Cisco ASA FirePOWER Module
- Managing Reusable Objects
- Managing Device Configuration
- Getting Started with Access Control Policies
- Blacklisting Using Security Intelligence IP Address Reputation
- Tuning Traffic Flow Using Access Control Rules
- Controlling Traffic with Network-Based Rules
- Controlling Traffic with Reputation-Based Rules
- Controlling Traffic Based on Users
- Controlling Traffic Using Intrusion and File Policies
- Intelligent Application Bypass
- Understanding Traffic Decryption
- Getting Started with SSL Policies
- Getting Started with SSL Rules
- Tuning Traffic Decryption Using SSL Rules
- Understanding Network Analysis and Intrusion Policies
- Using Layers in a Network Analysis or Intrusion Policy
- Customizing Traffic Preprocessing
- Getting Started with Network Analysis Policies
- Using Application Layer Preprocessors
- Configuring SCADA Preprocessing
- Configuring Transport & Network Layer Preprocessing
- Tuning Preprocessing in Passive Deployments
- Getting Started with Intrusion Policies
- Tuning Intrusion Policies Using Rules
- Detecting Specific Threats
- Globally Limiting Intrusion Event Logging
- Understanding and Writing Intrusion Rules
- Introduction to Identity Data
- Realms and Identity Policies
- User Identity Sources
- DNS Policies
- Blocking Malware and Prohibited Files
- Logging Connections in Network Traffic
- Viewing Events
- Configuring External Alerting
- Configuring External Alerting for Intrusion Rules
- Using the ASA FirePOWER Dashboard
- Using ASA FirePOWER Reporting
- Scheduling Tasks
- Managing System Policies
- Configuring ASA FirePOWER Module Settings
- Licensing the FireSIGHT System ASA FirePOWER Module
- Updating ASA FirePOWER Module Software
- Monitoring the System
- Using Backup and Restore
- Generating Troubleshooting Files
- Importing and Exporting Configurations
- Viewing the Status of Long-Running Tasks
- Security, Internet Access, and Communication Ports
Using the ASA FirePOWER Dashboard
The ASA FirePOWER module dashboard provides you with at-a-glance views of current system status. The dashboard displays widgets in a three-column layout. Widgets are small, self-contained components that provide insight into different aspects of the ASA FirePOWER module. Your system is delivered with several predefined widgets. For example, the Appliance Information widget tells you the appliance name, model, and currently running version of the ASA FirePOWER module software.
The dashboard has a time range that constrains its widgets. You can change the time range to reflect a period as short as the last hour or as long as the last year.
Each appliance is delivered with a default dashboard, named Summary Dashboard. This dashboard provides the casual user with general system status information for your ASA FirePOWER module deployment.
For more information on the dashboard and its contents, see the following sections:
Understanding Dashboard Widgets
The dashboard displays multiple widgets in a three-column layout. The ASA FirePOWER module is delivered with several predefined dashboard widgets, each of which provides insight into a different aspect of the system. You can minimize and maximize widgets, as well as rearrange the widgets.
Understanding Widget Preferences
Each widget has a set of preferences that determines its behavior.
Widget preferences can be simple. For example, you can set preferences for the Current Interface Status widget, which displays the current status of all enabled interfaces on the internal network. You can only configure the update frequency for this widget.
To modify a widget’s preferences:
Step 1 On the title bar of the widget whose preferences you want to change, click the show preferences icon (
).
The preferences section for that widget appears.
Step 2 Make changes as needed.
Your changes take effect immediately. For information on the preferences you can specify for individual widgets, see Understanding the Predefined Widgets.
Step 3 On the widget title bar, click the hide preferences icon (
) to hide the preferences section.
Understanding the Predefined Widgets
The ASA FirePOWER module is delivered with several predefined widgets that can provide you with at-a-glance views of current system status.
For detailed information on the widgets, see the following sections:
- Understanding the Appliance Information Widget
- Understanding the Current Interface Status Widget
- Understanding the Disk Usage Widget
- Understanding the Product Licensing Widget
- Understanding the Product Updates Widget
- Understanding the System Load Widget
- Understanding the System Time Widget
Understanding the Appliance Information Widget
The Appliance Information widget provides:
- the name, IPv4 address, IPv6 address, and model of the appliance
- the versions of the ASA FirePOWER module software, rule update, and geolocation update installed on the appliance
You can configure the widget to display more or less information by modifying the widget preferences to display a simple or an advanced view; the preferences also control how often the widget updates. For more information, see Understanding Widget Preferences.
Understanding the Current Interface Status Widget
The Current Interface Status widget shows the status of all interfaces on the appliance, enabled or unused. For each interface, the widget provides:
- the name of the interface
- the link state of the interface
- the link mode (for example, 100Mb full duplex, or 10Mb half duplex) of the interface
- the type of interface, that is, copper or fiber
- the amount of data received (Rx) and transmitted (Tx) by the interface
The color of the ball representing link state indicates the current status, as follows:
- green: link is up and at full speed
- yellow: link is up but not at full speed
- red: link is not up
- gray: link is administratively disabled
- blue: link state information is not available (for example, ASA)
The widget preferences control how often the widget updates. For more information, see Understanding Widget Preferences.
Understanding the Disk Usage Widget
The Disk Usage widget displays the space used on the hard drive, based on disk usage category. It also indicates the space used on and capacity of each partition of the appliance’s hard drive. The By Category stacked bar displays each disk usage category as a proportion of the total available disk space used. The following table describes the available categories.
You can configure the widget to display only the By Category stacked bar, or you can show the stacked bar plus the admin (
/
),
/Volume
, and
/boot
partition usage, as well as the
/var/storage
partition if the malware storage pack is installed, by modifying the widget preferences.
The widget preferences also control how often the widget updates, as well as whether it displays the current disk usage or collected disk usage statistics over the dashboard time range. For more information, see Understanding Widget Preferences.
Understanding the Product Licensing Widget
The Product Licensing widget shows the device and feature licenses currently installed. It also indicates the number of items (such as hosts or users) licensed and the number of remaining licensed items allowed.
The top section of the widget displays all device and feature licenses installed, including temporary licenses, while the Expiring Licenses section displays only temporary and expired licenses.
The bars in the widget background show the percentage of each type of license that is being used; you should read the bars from right to left. Expired licenses are marked with a strikethrough.
You can configure the widget to display either the features that are currently licensed, or all the features that you can license, by modifying the widget preferences. The preferences also control how often the widget updates. For more information, see Understanding Widget Preferences.
You can click any of the license types to go to the License page of the local configuration and add or delete feature licenses. For more information, see Licensing the ASA FirePOWER Module.
Understanding the Product Updates Widget
The Product Updates widget provides you with a summary of the software (ASA FirePOWER module software and rule updates) currently installed on the appliance as well as information on available updates that you have downloaded, but not yet installed, for that software.
Note that the widget displays
Unknown
as the latest version of the software unless you have configured a scheduled task to download, push, or install software updates; the widget uses scheduled tasks to determine the latest version. For more information, see Scheduling Tasks.
The widget also provides you with links to pages where you can update the software
You can configure the widget to hide the latest versions by modifying the widget preferences. The preferences also control how often the widget updates. For more information, see Understanding Widget Preferences.
On the Product Updates widget, you can:
- manually update an appliance by clicking the current version of the ASA FirePOWER module software, rule update, or geolocation update:
- to update the system software, or geolocation database, see Updating ASA FirePOWER Module Software.
- to import the newest rule update, see Importing Rule Updates and Local Rule Files.
- create a scheduled task to download the latest version of the ASA FirePOWER module software or rule update by clicking the latest version; see Scheduling Tasks.
Understanding the System Load Widget
The System Load widget shows the CPU usage (for each CPU), memory (RAM) usage, and system load (also called the load average, measured by the number of processes waiting to execute) on the appliance, both currently and over the dashboard time range.
You can configure the widget to show or hide the load average by modifying the widget preferences. The preferences also control how often the widget updates. For more information, see Understanding Widget Preferences.
Understanding the System Time Widget
The System Time widget shows the local system time, uptime, and boot time for the appliance.
You can configure the widget to hide the boot time by modifying the widget preferences. The preferences also control how often the widget synchronizes with the appliance’s clock. For more information, see Understanding Widget Preferences.
Working with the Dashboard
You can view and modify the widgets that appear on the dashboard.
For more information on working with the dashboard, see:
Viewing the Dashboard
At any time, to view the dashboard for your ASA FirePOWER module, select Home > ASA FirePOWER Dashboard .
The dashboard has a time range that constrains its widgets. You can change the time range to reflect a period as short as the last hour (the default) or as long as the last year. When you change the time range, the widgets that can be constrained by time automatically update to reflect the new time range.
Note that not all widgets can be constrained by time. For example, the dashboard time range has no effect on the Appliance Information widget, which provides information that includes the appliance name, model, and current version of the ASA FirePOWER module software.
Step 1 Select Home > ASA FirePOWER Dashboard .
The ASA FirePOWER dashboard appears.
To change the dashboard time range:
Step 1 From the Show the Last drop-down list, choose a dashboard time range.
All appropriate widgets on the page update to reflect the new time range.
Modifying the Dashboard
The dashboard displays widgets in a three-column layout. You can minimize and maximize widgets, as well as rearrange the widgets.
Rearranging Widgets
You can change the location of any widget.
Step 1 Click the title bar of the widget you want to move, then drag it to its new location.
) in a widget’s title bar.
) in a minimized widget’s title bar.
Feedback