About the Cloud-Delivered Firewall Management Center CLI

The Cloud-Delivered Firewall Management Center CLI provides access to view and troubleshoot your Cloud-Delivered Firewall Management Center.

When you use SSH to log into the Cloud-Delivered Firewall Management Center, you access the CLI. You can then access the Linux shell using the expert command, but this is strongly discouraged.

Caution

We strongly recommend that you do not access the Linux shell unless directed by Cisco TAC or explicit instructions in the Secure Firewall user documentation.

Caution

Users with Linux shell access can obtain root privileges, which can present a security risk. For system security reasons, we strongly recommend:

  • If you establish external authentication, make sure that you restrict the list of users with Linux shell access appropriately.

  • Do not establish Linux shell users in addition to the pre-defined admin user.

You can use the commands described in this appendix to view and troubleshoot your Cloud-Delivered Firewall Management Center. You can also perform limited configuration operations.