3

Cisco recently made available Firepower management via ASDM along with Firesight VM. I am using ASDM to manage and I am unable to see "Create new policy" under Configuration->Asa Firepower configuration->Access policy. The only policy I see is default policy and there is no button to enable it. enter image description here Have control and malware license applied. I tried rebooting firepower module.

Anyone had the same issue?

I am running Asa 5515x version 9.5(1)5, Firepower 6 and ASDM 7.5(2). The latest Java as well.

One thing that may not be relevant: ASDM can't connect to Firepower module when I am connecting via public ip address from outside. I need to connect from inside or connect to vpn and then use inside ip.

Thanks

Improve this question
4
  • This is a comment - You mentioned there is no button to enable the existing policy. Have you tried editing the existing "allow all" policy, using the edit icon? You should also be able to select "Add Rule", to add a new rule.
    – Amon Hogue
    Dec 30, 2015 at 15:50
  • I am able to edit and add rules but that doesn't make policy enabled and applied. Actually policy is applied because I see traffic hitting it on the report page. I just don't see the way to update/apply it when I make changes.
    – user4608
    Dec 30, 2015 at 16:48
  • Just curious, why not deploy FireSIGHT, the manager server and manage it from there?
    – Ronnie Royston
    Jun 5, 2016 at 22:40
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide your own answer and accept it.
    – Ron Maupin ♦
    Aug 12, 2017 at 23:47

2 Answers 2

Reset to default
3

I have the same configuration and software release. On your screenshot, the Acces control policy has an out of date status. This means you need to deploy ASA FirePower change with ASDM Deploy button.

It will create a task to apply the newest firepower configuration, then wait a few minutes for that task to complete. When Acces Control Policy shows "up to date on device" your access control policy should work correctly.

Improve this answer
1
  • Thanks for the input. Where is Asdm deploy button?
    – user4608
    Dec 31, 2015 at 15:29
0

I found out that only one Access Control Policy is allowed on setup I have. I also found deploy button. Feel stupid now:)

Thanks everyone who tried to help!

Improve this answer
0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.