Cisco Asdm 7 User Guide

 
30-11
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
ASA 5512-X through ASA 5555-X (Software Module)
These models run the ASA CX module as a software module, and the ASA CX management interface 
shares the Management 0/0 interface with the ASA.
If you have an inside router
If you have an inside router, you can route between the Management 0/0 network, which includes both 
the ASA and ASA CX management IP addresses, and...

 
30-12
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
CX IP address for that interface. Because the ASA CX module is essentially a separate device from the 
ASA, you can configure the ASA CX management address to be on the same network as the inside 
interface.
NoteYou must remove the ASA-configured name for Management 0/0; if it is configured on the ASA, then 
the ASA CX address must be on the same network as the ASA,...

 
30-13
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
The boot software lets you set basic ASA CX network configuration, partition the SSD, and download 
the larger system software from a server of your choice to the SSD.
Step 2Download the ASA CX system software from Cisco.com to an HTTP, HTTPS, or FTP server accessible 
from the ASA CX management interface. If you have a Cisco.com login, you can obtain the boot...

 
30-14
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
asacx-boot> system install https://upgrades.example.com/packages/asacx-sys-9.1.1.pkg
Username: buffy
Password: angelforever
Verifying
Downloading
Extracting
Package Detail
        Description:
        Requires reboot:
Cisco ASA CX System Upgrade
Yes
Do you want to continue with upgrade? [n]: Y
Warning: Please do not interrupt the process or turn off the system. Doing...

 
30-15
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
Step 3Click Send.
Single Context Mode
Step 1In ASDM, choose Wizards > Startup Wizard.
Step 2Click Next to advance through the initial screens until you reach the ASA CX Basic Configuration 
screen.
Step 3Enter the new management IP address, subnet mask, and default gateway.
Step 4(Optional) Change the Auth Proxy Port. You can set this later if desired. See the...

 
30-16
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
Step 5Click Finish to skip the remaining screens, or click Next to advance through the remaining screens and 
complete the wizard.
Configuring Basic ASA CX Settings at the ASA CX CLI
You must configure basic network settings and other parameters on the ASA CX module before you can 
configure your security policy.
Detailed Steps
Step 1Do one of the following:
(All...

 
30-17
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
Step 4After you complete the final prompt, you are presented with a summary of the settings. Look over the 
summary to verify that the values are correct, and enter Y to apply your changed configuration. Enter N 
to cancel your changes.
Example:
Apply the changes?(y,n) [Y]: Y
Configuration saved successfully!
Applying...
Done.
Generating self-signed certificate, the...

 
30-18
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
Launch PRSM from ASDM by choosing Home > ASA CX Status, and clicking the Connect to the 
ASA CX application link.
What to Do Next
(Optional) Configure the authentication proxy port. See the “(Optional) Configuring the 
Authentication Proxy Port” section on page 30-18.
Redirect traffic to the ASA CX module. See the “Redirecting Traffic to the ASA CX Module” 
section on...

 
30-19
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
Step 2Enter a port greater than 1024. The default is 885.
Step 3Click Apply.
Redirecting Traffic to the ASA CX Module
You can redirect traffic to the ASA CX module by creating a service policy that identifies specific traffic. 
For demonstration purposes only, you can also enable monitor-only mode for the service policy, which 
forwards a copy of traffic to the ASA CX...

 
30-20
Cisco ASA Series Firewall ASDM Configuration Guide
 
Chapter 30      Configuring the ASA CX Module
  Configuring the ASA CX Module
Detailed Steps
Step 1Choose Configuration > Firewall > Service Policy Rules.
Step 2Choose Add > Add Service Policy Rule. The Add Service Policy Rule Wizard - Service Policy dialog 
box appears.
Step 3Complete the Service Policy dialog box as desired. See the ASDM online help for more information 
about these screens.
Step 4Click Next. The Add Service Policy Rule...