ASA sourcefire port for managment

Question

Can I access the software modul of sourcefire with ip address from my inside ip subnet over the inside physical port? And to use management ports only for managing ASAs.

Answer 1

Not without some modification, you need to put a cable between one of your local ports to the management port, we Always use port GigabitEthernet1/8(ASA5506)

interface GigabitEthernet1/8
 nameif Firewizz-Management
 security-level 100
 zone-member MANAGEMENT
 ip address 10.203.7.250 255.255.255.0
!
interface Management1/1
 management-only
 nameif management
 security-level 0
 no ip address
!

object network obj_PAT_FirePower_Management_From_WAN
 nat (Firewizz-Management,WAN) static interface service tcp https 8443

sourcefire:

    > show network
===============[ System Information ]===============
Hostname                  : XXXX.LOCAL
DNS Servers               : 10.203.7.250
Management port           : 8443
IPv4 Default route
  Gateway                 : 10.203.7.250

======================[ eth0 ]======================
State                     : Enabled
Channels                  : Management & Events
Mode                      :
MDI/MDIX                  : Auto/MDIX
MTU                       : 1500
MAC Address               : 54:A2:74:27:90:B8
----------------------[ IPv4 ]----------------------
Configuration             : Manual
Address                   : 10.203.7.251
Netmask                   : 255.255.255.0
Broadcast                 : 10.203.7.255
----------------------[ IPv6 ]----------------------
Configuration             : Disabled

===============[ Proxy Information ]================
State                     : Disabled
Authentication            : Disabled

Hope it helped ;) If you cant get it working say what is't and ill get back on it.