Cisco Firepower FTD and FMC in EVE-NG
Threat Defense and Management Center images are in the Add Node list of every CloudLabBox workspace, from 6.2 to 7.7, along with NGIPSv. Run the managed pair in one lab and practise access control, NAT and intrusion policy.
Choose a planCheck it in the free demo
- Vendor
- Cisco
- In Add Node
- 63 images
- Templates
ftd7fmc7firepower6firepower- Newest
ftd7-FTD-7.7.0-89
Installed versions
Every Secure Firewall (Firepower) name in the Add Node image list, exactly as you’ll pick it.
Template ftd7
Threat Defense (FTDv) 7
ftd7-FTD-7.7.0-89ftd7-FTD-7.6.0-113ftd7-FTD-7.4.2-172ftd7-FTD-7.4.1-172ftd7-FTD-7.3.1-19ftd7-FTD-7.0.0-94
Template fmc7
Management Center (FMCv) 7
fmc7-7.7.0-89fmc7-7.6.0-113fmc7-7.4.2-172fmc7-7.4.1-172fmc7-7.3.1-19fmc7-7.0.0-94
Template firepower6
Threat Defense on the Firepower 6 template
firepower6-FTD-7.3.1-19firepower6-FTD-7.3.0-69firepower6-FTD-7.2.2-54firepower6-FTD-7.2.1-40firepower6-FTD-7.2.0-82firepower6-FTD-7.1.0-90firepower6-FTD-7.0.4-55firepower6-FTD-7.0.3-37firepower6-FTD-7.0.1-84firepower6-FTD-7.0.0-94firepower6-FTD-6.7.0-65firepower6-FTD-6.6.5-81
Show 10 older
firepower6-FTD-6.6.4-59firepower6-FTD-6.6.3-81firepower6-FTD-6.6.1-91firepower6-FTD-6.6.1-90firepower6-FTD-6.6.0-90firepower6-FTD-6.6.0firepower6-FTD-6.5.0-115firepower6-FTD-6.4.0-102firepower6-FTD-6.3.0-83firepower6-FTD-6.2.0-362
Template firepower6
Management Center on the Firepower 6 template
firepower6-FMC-7.3.1-19firepower6-FMC-7.3.0-69firepower6-FMC-7.2.2-54firepower6-FMC-7.2.1-40firepower6-FMC-7.2.0-82firepower6-FMC-7.1.0-90firepower6-FMC-7.0.4-55firepower6-FMC-7.0.3-37firepower6-FMC-7.0.1-84firepower6-FMC-7.0.0-94firepower6-FMC-6.7.0-65firepower6-FMC-6.6.5-81
Show 10 older
firepower6-FMC-6.6.4-59firepower6-FMC-6.6.3-81firepower6-FMC-6.6.1-91firepower6-FMC-6.6.1-90firepower6-FMC-6.6.0-90firepower6-FMC-6.6.0firepower6-FMC-6.5.0-123firepower6-FMC-6.4.0-102firepower6-FMC-6.3.0-83firepower6-FMC-6.2.0-362
Template firepower6
NGIPSv on the Firepower 6 template
firepower6-NGIPS-7.0.1-84firepower6-NGIPS-6.7.0-65firepower6-NGIPS-6.6.1-91firepower6-NGIPS-6.6.0-90.tarfirepower6-NGIPS-6.3.0-83firepower6-NGIPS-6.2.0-362
Template firepower
Defense Center 5.4
firepower-DEFC-5.4.0-763
Add it to a lab
In Add Node, choose the template, then the image. The template fills in these settings; change them before you start the node.
| Image | Template | CPU | RAM | Interfaces | Console |
|---|---|---|---|---|---|
| Threat Defense (FTDv) 7 | ftd7 | 4 | 8192 MB | 6 interfaces | VNC |
| Management Center (FMCv) 7 | fmc7 | 4 | 28762 MB | 1 interface | VNC |
| Threat Defense on the Firepower 6 template, Management Center on the Firepower 6 template, NGIPSv on the Firepower 6 template | firepower6 | 4 | 8192 MB | 5 interfaces: eth0 / mgmnt, then G0/0 to G0/3 | VNC |
| Defense Center 5.4 | firepower | 4 | 4096 MB | 4 interfaces: eth0 / mgmnt, then G0/0 to G0/2 | VNC |
EVE-NG admits a node by the CPU and RAM set on it, so a running node counts against your plan at these values. The largest of these templates starts nodes at 4 vCPU and 28,762 MB, more than the free demo’s 6 vCPU and 8 GB, so use the demo to find the image and a plan to run it.
An FTDv registered to an FMCv
Register an FTDv 7 to an FMCv 7, then build and deploy an access control policy for traffic between two Alpine Linux hosts on either side of it. You practise device registration, policy deployment and reading connection events.
- 1×Threat Defense (FTDv) 7
ftd74 vCPU, 8192 MB - 1×Management Center (FMCv) 7
fmc74 vCPU, 28762 MB - 2×Alpine Linux
clbalpinebase2 vCPU, 512 MB each
Added with these defaults, the lab uses 12 vCPU and 37.1 GB of RAM. The smallest plan that fits is Organization, with 24 vCPU and 48 GB: £10 a day, or £3 an hour On-Demand.
Licences are yours to bring
Threat Defense and Management Center use Cisco Smart Licensing. Management Center has a time-limited evaluation mode, and subscriptions such as IPS and URL filtering need your own entitlement: CloudLabBox doesn't provide Cisco licences or subscriptions.
The images run only inside your CloudLabBox workspace; they aren’t available to download.
Questions about Secure Firewall (Firepower)
What is Cisco Secure Firewall (Firepower)?
Cisco Secure Firewall Threat Defense (FTD, formerly Firepower) is Cisco's firewall with intrusion prevention and application control, managed from Secure Firewall Management Center (FMC). Both run as virtual machines, so you can run the managed pair in one lab.
Which template do I pick for an FTD or FMC image?
Pick the template the image name starts with: ftd7 and fmc7 hold the newest 7.x images, firepower6 holds older FTD, FMC and NGIPSv images such as firepower6-FTD-7.3.1-19, and firepower holds the Defense Center 5.4 image firepower-DEFC-5.4.0-763.
What is NGIPSv?
NGIPSv is Cisco's virtual intrusion prevention sensor: Firepower inspection without FTD's firewall and routing functions, managed from Management Center. Its images, such as firepower6-NGIPS-7.0.1-84, run on the firepower6 template.
Which Secure Firewall (Firepower) images are installed?
63 images (6 Threat Defense (FTDv) 7, 6 Management Center (FMCv) 7, 22 Threat Defense on the Firepower 6 template, 22 Management Center on the Firepower 6 template, 6 NGIPSv on the Firepower 6 template, 1 Defense Center 5.4), all listed on this page exactly as Add Node shows them. The newest is ftd7-FTD-7.7.0-89.
How much CPU and RAM does a Secure Firewall (Firepower) node use?
When you add one, the ftd7 template adds 4 vCPU and 8192 MB of RAM; the fmc7 template adds 4 vCPU and 28762 MB of RAM; the firepower6 template adds 4 vCPU and 8192 MB of RAM; the firepower template adds 4 vCPU and 4096 MB of RAM. You can change both in Add Node, and your plan counts what each running node is set to.
More images
CloudLabBox is independent of the vendors named on this page. Their names identify the images in the workspace’s Add Node list.