Cisco Secure Firewall Threat Defense Virtual (formerly FTDv/NGFWv)

TDv Autoscaling

This Repository provides resources to bring up TDv (Threat Defence Virtual) Auto Scale solution.

Some of the key features of the TDv Auto Scale include:

• Complete serverless implementation!
• Completely automated TDv instance registration and de-registration with FMC.
• NAT policy, Access Policy, IP and Routes are automatically applied to scaled-out TDv instance.
• Support for Enabling / Disabling Auto Scaling feature.

Threat Defense Virtual Cluster

• Clustering lets you group multiple threat defense units together as a single logical device.
• A cluster provides all the convenience of a single device (management, integration into a network) while achieving the increased throughput and redundancy of multiple devices.

AWS GuardDuty Integration with Cisco Secure Firewall

This solution make use of the threat analysis data/results from Amazon GuardDuty (malicious IPs generating threats, attacks etc.) and feeds that information(malicious IP) to the Cisco Secure Firewall Threat Defense Virtual via the managers: Cisco Secure Firewall Management Center Virtual , Cisco Secure Firewall Device Manager to protect the underlying network and applications against future threats originating from these sources(malicious IP).

Cloud Deployment Templates

This provides set of templates for deployment of NGFWv in public clouds.

Azure Templates

Azure Resource Manager(ARM) templates to deploy Cisco's NGFWv/FTDv and FMCv in Azure public cloud using custom image.

Azure Resource Manager Templates
Azure Resource Manager templates are JSON files that contain resource descriptions and parameter definitions.

• Template file: This is the main resources file that deploys all the components within the resource group.
• Parameter file: This file includes the parameters required to successfully deploy the FTDv.

Openstack Templates

This conatains heat template files to deploy the Secure Firewall Threat Defense Virtual (TDv) and Secure Firewall Management Center Virtual (MCv) on OpenStack environment.

Resources

FTDv Autoscale

• On Azure for NGFWv6.7.0 & Above: Code | README | Deployment/Configuration Guide

• On AWS for NGFWv6.7.0 & Above: Code | README | Deployment/Configuration Guide

• On OCI for NGFWv7.1.0 & Above: Code | README | Deployment/Configuration Guide

• On GCP for CSF7.2.0 & Above: Code | README | Deployment/Configuration Guide

Threat Defense Virtual Cluster

• On GCP for CSF7.2.0 and above: Code | README | Deployment/Configuration Guide

• On AWS for CSF7.2.0 and above: Code | README | Deployment/Configuration Guide

• On Azure for CSF7.3.0 and above: Code | README | Deployment/Configuration Guide

Cloud Service Integration

• AWS Guardduty: Code | README | Deployment/Configuration Guide

Deployment Template

• Azure NGFWv Deployment Template: README | NFWv/FTDv | FMCv
• Openstack NGFWv Heat Deployment Template: README | NFWv/FTDv | FMCv

Archived

• FTDv Auto Scaling for Azure for NGFWv6.6.0 : Code | README | Deployment/Configuration Guide
• FTDv Auto Scaling for AWS for NGFWv6.6.0 : Code | README | Deployment/Configuration Guide