This Repository provides resources to bring up TDv (Threat Defence Virtual) Auto Scale solution.
Some of the key features of the TDv Auto Scale include:
- Complete serverless implementation!
- Completely automated TDv instance registration and de-registration with FMC.
- NAT policy, Access Policy, IP and Routes are automatically applied to scaled-out TDv instance.
- Support for Enabling / Disabling Auto Scaling feature.
- Clustering lets you group multiple threat defense units together as a single logical device.
- A cluster provides all the convenience of a single device (management, integration into a network) while achieving the increased throughput and redundancy of multiple devices.
This solution make use of the threat analysis data/results from Amazon GuardDuty (malicious IPs generating threats, attacks etc.) and feeds that information(malicious IP) to the Cisco Secure Firewall Threat Defense Virtual via the managers: Cisco Secure Firewall Management Center Virtual , Cisco Secure Firewall Device Manager to protect the underlying network and applications against future threats originating from these sources(malicious IP).
This provides set of templates for deployment of NGFWv in public clouds.
Azure Resource Manager(ARM) templates to deploy Cisco's NGFWv/FTDv and FMCv in Azure public cloud using custom image.
Azure Resource Manager Templates
Azure Resource Manager templates are JSON files that contain resource descriptions and parameter definitions.
- Template file: This is the main resources file that deploys all the components within the resource group.
- Parameter file: This file includes the parameters required to successfully deploy the FTDv.
This conatains heat template files to deploy the Secure Firewall Threat Defense Virtual (TDv) and Secure Firewall Management Center Virtual (MCv) on OpenStack environment.
-
On Azure for NGFWv6.7.0 & Above: Code | README | Deployment/Configuration Guide
-
On AWS for NGFWv6.7.0 & Above: Code | README | Deployment/Configuration Guide
-
On OCI for NGFWv7.1.0 & Above: Code | README | Deployment/Configuration Guide
-
On GCP for CSF7.2.0 & Above: Code | README | Deployment/Configuration Guide
- On GCP for CSF7.2.0: Code | README | Deployment/Configuration Guide
- On AWS for CSF7.2.0: Code | README | Deployment/Configuration Guide
- AWS Guardduty: Code | README | Deployment/Configuration Guide
- Azure NGFWv Deployment Template: README | NFWv/FTDv | FMCv
- Openstack NGFWv Heat Deployment Template: README | NFWv/FTDv | FMCv
Archived
- FTDv Auto Scaling for Azure for NGFWv6.6.0 : Code | README | Deployment/Configuration Guide
- FTDv Auto Scaling for AWS for NGFWv6.6.0 : Code | README | Deployment/Configuration Guide