--- title: FTD FlexConfig description: FlexConfig basically, take commands that were once available in the ASA, convert and apply them to the FTD. --- [![looking-point_LogoWhite _ Presidio-1](https://www.lookingpoint.com/hubfs/looking-point_LogoWhite%20_%20Presidio-1.svg) ![LOOKINGPOINT](https://www.lookingpoint.com/hs-fs/hubfs/Theme%20Oct%202019/images/logo@mobile.png?width=444&height=86&name=logo@mobile.png) ](https://www-lookingpoint-com.sandbox.hs-sites.com/-temporary-slug-c10ae2f5-f23e-43f2-8214-f73884fb09ae) - [Solutions](https://www.lookingpoint.com) - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration) - [Security ](https://www.lookingpoint.com/it-solutions-security) - [Networking ](https://www.lookingpoint.com/it-solutions-networking) - [Data Center ](https://www.lookingpoint.com/data-center) - [Cloud](https://www.lookingpoint.com/cloud) - [Managed Services](https://www.lookingpoint.com/it-support-services) - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela) - [Services](https://www.lookingpoint.com/en/solutions-services) - [Assess and Design ](https://www.lookingpoint.com/assess-and-design-it-solutions) - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions) - [Support](https://www.lookingpoint.com/it-support-services) - [Wireless Surveys Assessments](https://www.lookingpoint.com/en-us/wireless-surveys-assessments) - [Project Management ](https://www.lookingpoint.com/project-management) - [Integration Center](https://www.lookingpoint.com/integration-services) - [Lifecycle Support](https://www.lookingpoint.com/it-lifecycle-support) - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area) - [Customer Success](https://www.lookingpoint.com/services-customer-success) - [Partners](https://www.lookingpoint.com/partner) - [Blog](https://www.lookingpoint.com/blog) - [Solutions](https://www.lookingpoint.com) - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration) - [Security ](https://www.lookingpoint.com/it-solutions-security) - [Networking ](https://www.lookingpoint.com/it-solutions-networking) - [Data Center ](https://www.lookingpoint.com/data-center) - [Cloud](https://www.lookingpoint.com/cloud) - [Managed Services](https://www.lookingpoint.com/it-support-services) - [Services](https://www.lookingpoint.com/en/solutions-services) - [Assess and Design](https://www.lookingpoint.com/assess-and-design-it-solutions) - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions) - [Support](https://www.lookingpoint.com/it-support-services) - [Wireless Survey Assessment](https://www.lookingpoint.com/en-us/wireless-surveys-assessments) - [Project Management ](https://www.lookingpoint.com/project-management) - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela) - [Integration Center](https://www.lookingpoint.com/integration-services) - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area) - [Customer Success](https://www.lookingpoint.com/services-customer-success) - [Partners](https://www.lookingpoint.com/partner) - [Blog](https://www.lookingpoint.com/blog) - [+1 925-566-3480](tel:+1%20925-566-3480) - [DO NOT SHARE OR SELL MY PERSONAL INFORMATION](https://na1.hs-data-privacy.com/request/TrvvEe3VpnlESmYolHn3xw) - [![phone@2x](https://www.lookingpoint.com/hubfs/Theme%20Oct%202019/fonts/phone@2x.png) +1 925-566-3480 ](tel:+19255663480) - [![user@2x](https://www.lookingpoint.com/hubfs/Theme%20Oct%202019/fonts/user@2x.png) Acela Portal ](https://my.lookingpoint.com/) - [Free Consultation](https://www.lookingpoint.com/blog/ftd-flexconfig#get-free-popup) Let’s Connect [Home](https://www.lookingpoint.com/) [Blog](https://www.lookingpoint.com/blog) FTD FlexConfig # Blog May 20 FTD FlexConfig Posted by [Rick Wong](https://www.lookingpoint.com/blog/author/rick-wong) [**1](https://www.lookingpoint.com/blog/ftd-flexconfig#comments-listing) ** Share - [**](https://www.facebook.com/sharer/sharer.php?u=https://www.lookingpoint.com/blog/ftd-flexconfig&title=FTD%20FlexConfig&picture=&description=FlexConfig%20basically,%20take%20commands%20that%20were%20once%20available%20in%20the%20ASA,%20convert%20and%20apply%20them%20to%20the%20FTD.) - [**](https://twitter.com/intent/tweet?source=https://www.lookingpoint.com/blog/ftd-flexconfig&text=FTD%20FlexConfig) - [**](https://plus.google.com/share?url=https://www.lookingpoint.com/blog/ftd-flexconfig) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.lookingpoint.com/blog/ftd-flexconfig&title=FTD%20FlexConfig&summary=FlexConfig%20basically,%20take%20commands%20that%20were%20once%20available%20in%20the%20ASA,%20convert%20and%20apply%20them%20to%20the%20FTD.) - [**](mailto:?subject=FTD%20FlexConfig&body=FTD%20FlexConfig%20https://www.lookingpoint.com/blog/ftd-flexconfig) [cisco](https://www.lookingpoint.com/blog/topic/cisco) [ASA](https://www.lookingpoint.com/blog/topic/asa) [FMC](https://www.lookingpoint.com/blog/topic/fmc) [FlexConfig](https://www.lookingpoint.com/blog/topic/flexconfig) [CLI](https://www.lookingpoint.com/blog/topic/cli) [FTD FlexConfig](https://www.lookingpoint.com/blog/topic/ftd-flexconfig) [FTD](https://www.lookingpoint.com/blog/topic/ftd) [GUI](https://www.lookingpoint.com/blog/topic/gui) With the FTDs being managed by FMC everything is now configured via GUI. There is no longer the option of configuring via CLI like the ASAs. You can still access the CLI but Cisco does not officially support configuration using the CLI. Obviously, there are pros and cons to this. You no long need to remember syntax and which command does what. You just need to know how to navigate the GUI menus within FMC. With the move to GUI based only management some control functions are lost. Also, migrating from an ASA to FTD you lose some commands that were once available in the ASA. This is where FLexConfig comes in. ## What is FlexConfig? FlexConfig basically, take commands that were once available in the ASA, convert and apply them to the FTD. Realizing the limitations FTD code, Cisco even included pre-configured FlexConfig templates that can be duplicated and modified for use. Cisco also included predefined FlexConfig Text objects are reference by the FlexConfig Objects. ## Prerequisites - Knowledge of the ASA or FTD CLI - Understand what the command is used for and how it affects the system. ## Blacklisted CLI Commands Not all ASA commands are supported.  Below is the list of commands that are not supported. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-234.png?width=600&name=image-234.png) ## FlexConfig Configuration   To access Flexconfig: Go to **Objects** > **Object Management**, then select **FlexConfig**   Look through the predefined FlexConfig objects and see if one meets the requirement. Make a copy of the FlexcConfig object and edit the contents since the predefined objects cannot be modified. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-235.png?width=600&name=image-235.png)   ## Example FlexConfig Policy In this example.  We will create a Flexconfig Policy to adjust the tcp mss for connections through the FTD.   1. Make a copy of the Sysopt_Basic FLexConfig Object and modify it. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-241.png?width=548&name=image-241.png) The FlexConfig Object is modified and renamed. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-242.png?width=535&name=image-242.png) 2. Next click the validate icon to validate the syntax and save the changes. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-243.png?width=388&name=image-243.png)![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-244.png?width=600&name=image-244.png) 3. Go to **Devices > FlexConfig** ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-245.png?width=600&name=image-245.png) 4. Create a new policy, assigned it to an FTD and save. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-246.png?width=600&name=image-246.png) 5. Select the user defined policy and assigned it to the Append FlexConfig section. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-247.png?width=600&name=image-247.png) 6. Preview the configuration. Look in the Append section of the configuration.    Save the policy and deploy to the selected FTD. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-248.png?width=600&name=image-248.png) 7. Verify the configuration from the FMC using Advanced Troubleshooting and Threat Defence CLI. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-249.png?width=600&name=image-249.png) 8. You can also SSH to the FTD CLI and verified the FLexConfig Policy was applied. ![FTD FlexConfig](https://www.lookingpoint.com/hs-fs/hubfs/image-250.png?width=552&name=image-250.png)     So that's is how you set up FlexConfig. As always if you have any questions on FTD FlexConfig and would like to schedule a free consultation with us, please reach out to us at [sales@lookingpoint.com](mailto:sales@lookingpoint.com) and we’ll be happy to help! [![Contact Us](https://no-cache.hubspot.com/cta/default/2215854/7814218f-8d49-4d01-9a8c-095c00c0b08d.png)](https://cta-redirect.hubspot.com/cta/redirect/2215854/7814218f-8d49-4d01-9a8c-095c00c0b08d)   Written By: Rick Wong, Network Engineer SHARE: - [**](https://www.facebook.com/sharer/sharer.php?u=https://www.lookingpoint.com/blog/ftd-flexconfig&title=FTD%20FlexConfig&picture=&description=FlexConfig%20basically,%20take%20commands%20that%20were%20once%20available%20in%20the%20ASA,%20convert%20and%20apply%20them%20to%20the%20FTD.) - [**](https://twitter.com/intent/tweet?source=https://www.lookingpoint.com/blog/ftd-flexconfig&text=FTD%20FlexConfig) - [**](https://plus.google.com/share?url=https://www.lookingpoint.com/blog/ftd-flexconfig) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://www.lookingpoint.com/blog/ftd-flexconfig&title=FTD%20FlexConfig&summary=FlexConfig%20basically,%20take%20commands%20that%20were%20once%20available%20in%20the%20ASA,%20convert%20and%20apply%20them%20to%20the%20FTD.) - [**](mailto:?subject=FTD%20FlexConfig&body=FTD%20FlexConfig%20https://www.lookingpoint.com/blog/ftd-flexconfig) ### Topics - [cisco](https://www.lookingpoint.com/blog/topic/cisco) - [security](https://www.lookingpoint.com/blog/topic/security) - [cybersecurity](https://www.lookingpoint.com/blog/topic/cybersecurity) - [Cisco ISE](https://www.lookingpoint.com/blog/topic/cisco-ise) - [collaboration](https://www.lookingpoint.com/blog/topic/collaboration) - [ISE](https://www.lookingpoint.com/blog/topic/ise) - [webex](https://www.lookingpoint.com/blog/topic/webex) - [IT Solutions](https://www.lookingpoint.com/blog/topic/it-solutions) - [cisco webex](https://www.lookingpoint.com/blog/topic/cisco-webex) - [SD-WAN](https://www.lookingpoint.com/blog/topic/sd-wan) ### Latest Tweets ** ### subscribe to our blog ## Get New Unique Posts ![looking-point_LogoWhite _ Presidio-1](https://www.lookingpoint.com/hubfs/looking-point_LogoWhite%20_%20Presidio-1.svg) 391 Taylor Blvd. Suite 120 Pleasant Hill, California 94523 [Call Us +1 925-566-3480](tel:+19255663480) [sales@lookingpoint.com](mailto:sales@lookingpoint.com) - [**](https://www.facebook.com/lookingpoint?fref=ts) - [**](https://twitter.com/lookingpoint) - [**](https://www.linkedin.com/company/lookingpoint) - [**](https://www.instagram.com/lookingpoint/) SOLUTIONS - [Collaboration](https://www.lookingpoint.com/it-solutions-collaboration) - [ Security](https://www.lookingpoint.com/it-solutions-security) - [Networking ](https://www.lookingpoint.com/it-solutions-networking) - [Cloud](https://www.lookingpoint.com/cloud) - [Data Center ](https://www.lookingpoint.com/data-center) - [Project Management ](https://www.lookingpoint.com/project-management) - [Lifecycle Management](https://www.lookingpoint.com/lifecycle-management-acela) - [Wireless Surveys Assessments](https://www.lookingpoint.com/en-us/wireless-surveys-assessments) MANAGED SERVICES - [Assess and Design](https://www.lookingpoint.com/assess-and-design-it-solutions) - [Deployment](https://www.lookingpoint.com/deployment-it-services-solutions) - [Support](https://www.lookingpoint.com/it-support-services) - [Integration Center](https://www.lookingpoint.com/integration-services) - [Lifecycle Support](https://www.lookingpoint.com/it-lifecycle-support) - [Locations Serviced](https://www.lookingpoint.com/it-consulting-san-francisco-bay-area) - [Customer Success](https://www.lookingpoint.com/services-customer-success) COMPANY - [Contact Us](https://www.lookingpoint.com/contact-us) - [Career](https://www.lookingpoint.com/career) - [About Us](https://www.lookingpoint.com/about-us) - [ FAQ](https://www.lookingpoint.com/faq) - [ Partners](https://www.lookingpoint.com/partner) - [Blog](https://www.lookingpoint.com/blog) - [Privacy Policy](https://www.lookingpoint.com/privacy-policy) - [DO NOT SELL OR SHARE MY PERSONAL INFORMATION](https://na1.hs-data-privacy.com/request/TrvvEe3VpnlESmYolHn3xw) GET IN TOUCH Join our mailing list to stay up to date and get notices about our new releases! Looking Point Inc. 2026 Cookie Settings