Firepower Threat Defense Deployment with CDO
and Low-Touch Provisioning
Is This Chapter for You?
Low-Touch Provisioning (LTP) simplifies and automates the onboarding of new Firepower Threat Defense
(FTD) devices to Cisco Defense Orchestrator (CDO). LTP streamlines the deployment of new Firepower
devices by allowing network administrators to deliver the devices directly to a branch office, add the devices
to the CDO cloud-based device manager, and then manage the devices after the FTD device successfully
connects to the Cisco Cloud.
This chapter explains how to onboard your Firepower devices to CDO using low-touch provisioning. CDO
is a cloud-based multi-device manager that facilitates management of security policies in highly distributed
environments to achieve consistent policy implementation. CDO helps you optimize your security policies
by identifying inconsistencies with them and by giving you tools to fix them. CDO gives you ways to share
objects and policies, as well as make configuration templates, to promote policy consistency across devices.
Note
This feature requires Firepower version 6.7 or later.
This document assumes the Firepower 1010 hardware has a pre-installed FTD image on it. The Firepower
1010 hardware can run either FTD software or ASA software. Switching between FTD and ASA requires
you to reimage the device. See
The Firepower 1010 runs an underlying operating system called the Firepower eXtensible Operating System
(FXOS). The Firepower 1010 does not support the FXOS Firepower Chassis Manager; only a limited CLI is
supported for troubleshooting purposes. See the
Privacy Collection Statement—The Firepower 1010 Series does not require or actively collect
personally-identifiable information. However, you can use personally-identifiable information in the
configuration, for example for usernames. In this case, an administrator might be able to see this information
when working with the configuration or when using SNMP.
•
End-to-End Procedure, on page 6
•
Branch Office Installation, on page 7
•
CDO Administrator Onboarding and Management, on page 11
C H A P T E R
Reimage the Cisco ASA or Firepower Threat Defense
FXOS troubleshooting guide
Cisco Firepower 1010 Getting Started Guide
2
Device.
for more information.
5