Compatibility

These topics provide compatibility information for this Firepower version.

Supported Firepower Management Centers

Firepower Management Center:

  • MC 1000, 2500, 4500

  • MC 2000, 4000

  • MC 750, 1500, 3500

Firepower Management Center Virtual:

  • VMware vSphere/VMware ESXi 6.0 and 6.5

  • Kernel-based virtual machine (KVM)

  • Amazon Web Services (AWS) VPC/EC2

Supported Devices by Manager

You can manage a Firepower device either locally (FDM/ASDM) or with a Firepower Management Center. You can use only one management method for a device at a time.

FMC Deployments

Table 1. Supported FTD Devices with FMC
Firepower Threat Defense Platform Operating System

Firepower 2100 series:

  • Firepower 2110, 2120, 2130, 2140

6.3.0.2: FXOS 2.4.1.237

6.3.0.1: FXOS 2.4.1.222

Automatic upgrade—bundled.

Firepower 4100/9300 chassis:

  • Firepower 4110, 4120, 4140, 4150

  • Firepower 9300 with SM-24, SM-36, SM-44 modules

6.3.0.2: FXOS 2.4.1.234

6.3.0.1: FXOS 2.4.1.222

Any Version 6.3.0.x patch for these devices can run on FXOS 2.4.1.214. However, to resolve issues, you may need to upgrade FXOS to the version listed for your patch. To help you decide, see the Cisco FXOS Release Notes, 2.4(1).

Separate upgrade. Upgrade FXOS first.

ISA 3000

ASA 5500-X series:

  • ASA 5508-X, 5516-X

  • ASA 5515-X, 5525-X, 5545-X, 5555-X

6.3.0.2: ASA 9.10(1.12)

6.3.0.1: ASA 9.10(1.8)

Automatic upgrade—bundled.

Firepower Threat Defense Virtual:

  • VMware vSphere/VMware ESXi 6.0 and 6.5

  • Kernel-based virtual machine (KVM)

  • Amazon Web Services (AWS) EC2/VPC

  • Microsoft Azure Standard D3 and D3_v2

See the documentation for your virtual hosting environment.
Table 2. Supported NGIPS Devices with FMC
NGIPS Platform Operating System

Firepower 7000/8000 series:

  • Firepower 7010, 7020, 7030, 7050

  • Firepower 7110, 7115, 7120, 7125

  • Firepower 8120, 8130, 8140

  • Firepower 8250, 8260, 8270, 8290

  • Firepower 8350, 8360, 8370, 8390

  • AMP 7150, 8050, 8150

  • AMP 8350, 8360, 8370, 8390

Firepower.

Automatic upgrade—bundled.

ASA with FirePOWER Services:

  • ISA 3000

  • ASA 5508-X, 5516-X

  • ASA 5515-X, 5525-X, 5545-X, 5555-X

  • ASA 5585-X-SSP-10, -20, -40, -60

Any of:

  • ASA 9.5(2), 9.5(3)

  • ASA 9.6(x) through 9.12(x)

There is wide compatibility between ASA and ASA FirePOWER versions. However, even if an ASA upgrade is not strictly required, resolving issues may require an upgrade to the latest supported version.

Separate upgrade. See the Cisco ASA Upgrade Guide for order of operations.

NGIPSv:

  • VMware vSphere/VMware ESXi 6.0 and 6.5

See the documentation for your virtual hosting environment.

FDM Deployments

Table 3. Supported FTD Devices with FDM
Firepower Threat Defense Platform Operating System

Firepower 2100 series:

  • Firepower 2110, 2120, 2130, 2140

6.3.0.2: FXOS 2.4.1.237

6.3.0.1: FXOS 2.4.1.222

Automatic upgrade—bundled.

ISA 3000

ASA 5500-X series:

  • ASA 5508-X, 5516-X

  • ASA 5515-X, 5525-X, 5545-X, 5555-X

6.3.0.2: ASA 9.10(1.12)

6.3.0.1: ASA 9.10(1.8)

Automatic upgrade—bundled.
Firepower Threat Defense Virtual:

  • VMware vSphere/VMware ESXi 6.0 and 6.5

  • Kernel-based virtual machine (KVM)

See the documentation for your virtual hosting environment.

ASDM Deployments

Use ASDM 7.10.1+ to manage Version 6.3.0.x of the ASA FirePOWER module.

Table 4. Supported ASA FirePOWER Devices with ASDM
ASA FirePOWER Platform Operating System

ISA 3000

ASA 5500-X series:

  • ASA 5508-X, 5516-X

  • ASA 5515-X, 5525-X, 5545-X, 5555-X

  • ASA 5585-X-SSP-10, -20, -40, -60

Any of:

  • ASA 9.5(2), 9.5(3)

  • ASA 9.6(x) through 9.12(x)

There is wide compatibility between ASA and ASA FirePOWER versions. However, even if an ASA upgrade is not strictly required, resolving issues may require an upgrade to the latest supported version.

Separate upgrade. See the Cisco ASA Upgrade Guide for order of operations.

Manager-Device Version Compatibility

We recommend the FMC run the same (or higher) version as its managed devices. Although mixed-version deployments are supported, new features and resolved issues often require the latest version on the FMC and its managed devices.

Table 5. Version 6.3.0.x Manager-Device Version Compatibility

Firepower Management Center

Version 6.3.0.x FMC

can manage

Version 6.1 through 6.3.0.x devices

Version 6.3.0.x devices

require

Version 6.3.0 FMC

Firepower Device Manager

Version 6.3.0.x FDM

can manage

one FTD device

ASDM

Version 7.10.1 ASDM

can manage

Version 5.3.x through 6.3.0.x ASA FirePOWER modules

Version 6.3.0.x ASA FirePOWER modules

require

Version 7.10.1 ASDM

Integrated Product Compatibility

You can integrate a variety of Cisco products with Firepower.

Table 6. Firepower Version 6.3.0.x Compatibility with Integrated Products
Product Version

Cisco Firepower System User Agent

2.3

Cisco Identity Services Engine: ISE

2.3

2.3 patch 2

2.4

Cisco Identity Services Engine: ISE-PIC

2.2 patch 1

2.4

Cisco Terminal Services (TS) Agent

1.1

1.2

Cisco AMP Threat Grid

2.1.4+

Cisco AnyConnect Secure Mobility Client

4.0+

Cisco Security Packet Analyzer

Any

Web Browser Compatibility

Browsing the Web from a Firepower-Monitored Network

Many browsers use Transport Layer Security (TLS) v1.3 by default. If you are using an SSL policy to handle encrypted traffic, and people in your monitored network use browsers with TLS v1.3 enabled, websites that support TLS v1.3 may fail to load.

For more information, see the software advisory titled: Failures loading websites using TLS 1.3 with SSL inspection enabled.

Using Firepower Web Interfaces

Firepower web interfaces are tested with various popular browsers. If you encounter issues with a browser that is not listed, we ask that you switch to a tested browser. If you continue to encounter issues, contact Cisco TAC.


Note
SSL certificates allow the FMC (and 7000/8000 series devices) to establish an encrypted channel between the appliance and your browser. By default, the system comes with a self-signed HTTPS server certificate. We recommend that you replace it with a certificate signed by a globally known or internally trusted certificate authority (CA). You can generate custom server certificate requests and import custom server certificates on the HTTPS Certificates page; choose System > Configuration, then click HTTPS Certificates. For more information, see the online help or the Firepower Management Center Configuration Guide.
Table 7. Browsers Tested with Firepower Web Interfaces
Browser Required Settings and Additional Warnings

Google Chrome

JavaScript, cookies

Chrome does not cache static content, such as images, CSS, or JavaScript, with the system-provided self-signed certificate. Especially in low bandwidth environments, this can extend page load times. If you do not want to replace the self-signed certificate, you can instead add it to the trust store of the browser/OS.

Mozilla Firefox

JavaScript, cookies, TLS v1.2

When it updates, Firefox sometimes stops trusting the system-provided self-signed certificate. If you do not want to replace the certificate, and the login page does not load, refresh Firefox. Type about:support in the Firefox search bar and click Refresh Firefox. You will lose some settings; see the Refresh Firefox support page.

Microsoft Internet Explorer 10 and 11 (Windows)

JavaScript, cookies, TLS v1.2, 128-bit encryption

For the Check for newer versions of stored pages browsing history option, choose Automatically.

Disable the Include local directory path when uploading files to server custom security setting (Internet Explorer 11 only).

Enable Compatibility View for the Firepower web interface IP address/URL.

Apple Safari 10 and 11 (MacOS)

Tested with Firepower Device Manager only.

Microsoft Edge (Windows)

Not tested.

Screen Resolution Requirements

Table 8. Screen Resolution Requirements for Firepower User Interfaces
Interface Resolution

Firepower Management Center

1280 pixels wide

7000/8000 series device (limited local interface)

1280 pixels wide

Firepower Device Manager

1024 pixels wide by 768 pixels high

ASDM managing an ASA FirePOWER module

1024 pixels wide by 768 pixels high

Firepower Chassis Manager for Firepower 4100/9300 chassis

1024 pixels wide by 768 pixels high