Skip to main content Link Search Menu Expand Document (external link)

Cisco Firewall

Table of contents

  1. Firepower Initial Configuration
  2. Zone
  3. Configure AD Identity Realms

Firepower Initial Configuration 

Configure PC (no internet) as below:
IP address: 192.168.45.2
Netmask: 255.255.255.0
Gateway: 192.168.45.1
Connect to management port
Access appliance's default IP address: https://192.168.45.45
Username: admin
Password: Admin123
Setup Outside Interface / Management Interface / Time Zone / NTP Time Server
Firepower 2100 default port
Outside Interface: Ethernet1/1
Inside Interface: Ethernet1/2

Zone

After initial configuration, there are inside_zone and outside_zone

Each interface must belong to a zone, because you configure policies based on security zones, not interfaces

Create interface, then create zone, and add the interface

Configure AD Identity Realms

Objects -> Identity Realm

Identity—The realm provides user identity and group membership information, which you can then use in access control rules

Remote access VPN—The realm provides authentication services, which determine whether a connection is allowed