The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter describes the ASDM Startup Wizard, which guides you through the initial configuration of the Cisco ASA and helps you define basic settings.
To access the Startup Wizard, choose one of the following options:
Wizards > Startup Wizard.
Configuration > Device Setup > Startup Wizard, then click Launch Startup Wizard.
The Startup Wizard is not supported in the system context.
The actual sequence of screens is determined by your specified configuration selections. Each screen is available for all modes or models unless otherwise noted.
Click the Modify existing configuration radio button to change the existing configuration.
Click the Reset configuration to factory defaults radio button to set the configuration to the factory default values.
Check the Configure the IP address of the management interface check box to configure the IP address and subnet mask of the Management 0/0 interface to be different from the default value (192.168.1.1).
 Note |
If you reset the configuration to factory defaults, you cannot undo these changes by clicking Cancel or by closing this screen. |
In multiple context mode, this screen does not include any parameters.
Set the hostname, domain name, and enable password in this screen.
The interface screens depend on the mode and model selected.
Configure the IP address of the outside interface (the interface with the lowest security level).
Configure the IPv6 address.
Configure the PPPoE settings for the outside interface.
For IPv4, a management IP address is required for each bridge group for both management traffic and for traffic to pass through the ASA. This screen sets the IP address for BVI 1.
Configure parameters for other interfaces.
Configure static routes.
Configure the DHCP server.
Configures NAT or PAT for inside addresses (the interface with the highest security level) when accessing the outside (the interface with the lowest security level). See the firewall configuration guide for more information.
Configure ASDM, Telnet, or SSH access.
Check the Enable HTTP server for HTTPS/ASDM access check box to enable a secure connection to an HTTP server to access ASDM.
Check the Enable ASDM history metrics check box.
In single context mode, use the Startup Wizard in ASDM to configure basic IPS network configuration. These settings are saved to the IPS configuration, not the ASA configuration. See the IPS quick start guide for more information.
You can use the Startup Wizard in ASDM to configure the ASA CX management address and Auth Proxy Port. These settings are saved to the ASA CX configuration, not the ASA configuration. You will also need to set additional network settings at the ASA CX CLI. See the ASA CX quick start guide for information about this screen.
You can use the Startup Wizard in ASDM to configure the ASA FirePOWER management address information and accept the end user license agreement (EULA). These settings are saved to the ASA FirePOWER configuration, not the ASA configuration. You will also need to configure some settings in the ASA FirePOWER CLI. For more information, see the chapter on the ASA FirePOWER module in the firewall configuration guide.
Configure the clock parameters.
Follow these guidelines to configure an Auto-Update Server:
Configure an auto update server by checking the Enable Auto Update Server for ASA check box.
Check the Enable Signature and Engine Updates from Cisco.com check box if you have an IPS module. Set the following additional parameters:
Enter your Cisco.com username and password, then confirm the password.
Enter the start time in hh:mm:ss format, using a 24-hour clock.
This screen summarizes all of the configuration settings that you have made for the ASA.
Click Back to change any of the settings in previous screens.
Choose one of the following:
If you ran the Startup Wizard directly from a browser, when you click Finish, the configuration settings that you created through the wizard are sent to the ASA and saved in flash memory automatically.
If you ran the Startup Wizard from within ASDM, you must explicitly save the configuration in flash memory by choosing File > Save Running Configuration to Flash.
|
Feature Name |
Platform Releases |
Description |
|---|---|---|
|
Startup Wizard |
7.0(1) |
This wizard was introduced. We introduced the Wizards > Startup Wizard screen. |
|
ASA IPS Configuration |
8.4(1) |
For the ASA IPS module, the IPS Basic Configuration screen was added to the startup wizard. Signature updates for the IPS module were also added to the Auto Update screen. The Time Zone and Clock Configuration screen was added to ensure the clock is set on the ASA; the IPS module gets its clock from the ASA. We introduced or modified the following screens: Wizards > Startup Wizard > IPS Basic Configuration Wizards > Startup Wizard > Auto Update Wizards > Startup Wizard > Time Zone and Clock Configuration |
|
ASA CX Configuration |
9.1(1) |
For the ASA CX module, the ASA CX Basic Configuration screen was added to the startup wizard. We introduced the following screens: Wizards > Startup Wizard > ASA CX Basic Configuration |
|
ASA FirePOWER Configuration |
9.2(2.4) |
For the ASA FirePOWER module, the ASA FirePOWER Basic Configuration screen was added to the startup wizard. We introduced the following screens: Wizards > Startup Wizard > ASA FirePOWER Basic Configuration |
Feedback