This Repository provides resources to bring up CSFTDv (Threat Defence Virtual) Auto Scale solution.
Some of the key features of the CSFTDv Auto Scale include:
- Complete serverless implementation!
- Completely automated CSFTDv instance registration and de-registration with FMC.
- NAT policy, Access Policy, IP and Routes are automatically applied to scaled-out CSFTDv instance.
- Support for Enabling / Disabling Auto Scaling feature.
-
On Azure for CSFTDv6.7.0 & Above: Code | README | Deployment/Configuration Guide
-
On AWS for CSFTDv6.7.0 & Above: Code | README | Deployment/Configuration Guide
-
On OCI for CSFTDv7.1.0 & Above: Code | README | Deployment/Configuration Guide
-
On GCP for CSFTDv7.2.0 & Above: Code | README | Deployment/Configuration Guide
- Clustering lets you group multiple threat defense units together as a single logical device.
- A cluster provides all the convenience of a single device (management, integration into a network) while achieving the increased throughput and redundancy of multiple devices.
-
On GCP for CSFTDv7.2.0 and above: Code | README | Deployment/Configuration Guide
-
On AWS for CSFTDv7.2.0 and above: Code | README | Deployment/Configuration Guide
-
On Azure for CSFTDv7.3.0 and above: Code | README | Deployment/Configuration Guide
This solution make use of the threat analysis data/results from Amazon GuardDuty (malicious IPs generating threats, attacks etc.) and feeds that information(malicious IP) to the Cisco Secure Firewall Threat Defense Virtual via the managers: Cisco Secure Firewall Management Center Virtual , Cisco Secure Firewall Device Manager to protect the underlying network and applications against future threats originating from these sources(malicious IP).
- AWS Guardduty: Code | README | Deployment/Configuration Guide
This provides set of templates for deployment of CSFTDv in public clouds.
Azure Resource Manager(ARM) templates to deploy CSFTDv and CSFMCv in Azure public cloud using custom image.
Azure Resource Manager Templates
Azure Resource Manager templates are JSON files that contain resource descriptions and parameter definitions.
- Template file: This is the main resources file that deploys all the components within the resource group.
- Parameter file: This file includes the parameters required to successfully deploy the CSFTDv.
This conatains heat template files to deploy the Secure Firewall Threat Defense Virtual (TDv) and Secure Firewall Management Center Virtual (MCv) on OpenStack environment.
- FTDv Auto Scaling for Azure for CSFTDv6.6.0 : Code | README | Deployment/Configuration Guide
- FTDv Auto Scaling for AWS for CSFTDv6.6.0 : Code | README | Deployment/Configuration Guide