topic Re: FTD Appliance running Multi Contexts in Network Security

FTD Appliance running Multi Contexts

GRANT3779 — Fri, 21 Feb 2020 16:01:25 GMT

When running Multiple CTXs using FTD image, is the firepower/inspection engine virtualised as well?

e.g

Context 1 - Customer A

Context 2 - Customer B

Context 3 - Customer C

Can I apply a different ACP to each context?

I know from using traditional ASA with FP Services, that when using multi ctx, the sensors were a single entity and the same ACP was used for all contexts.

Does this now differ with FTD image?

Re: FTD Appliance running Multi Contexts

rosannle — Thu, 26 Jul 2018 16:22:12 GMT

Hello,

FTD does not currently support multiple context.

Re: FTD Appliance running Multi Contexts

GRANT3779 — Fri, 27 Jul 2018 08:37:27 GMT

Hi Rossannle,

I seem to be reading mix information this then.

Looking ahead then, do we know the the inspection engine plane will be virtualised as well for multiple ctx? Seems to me that it would need to be to be fully scalable.

Re: FTD Appliance running Multi Contexts

Nikolaj Pabst — Mon, 30 Jul 2018 07:47:59 GMT

Hi Grant,

Multi Contexts is not supported yet, and it will be called Multi Instance. You will get this feature in 6.3 later this year.

This will only be supported on 4100 and 9300 Appliances, and will work slightly different than Multi Context on ASA.

/Nikolaj

Re: FTD Appliance running Multi Contexts

Marvin Rhoads — Mon, 30 Jul 2018 13:22:10 GMT

The multiple instances will be containerized and wholly separate from one another.

Andrew Ossipov wrote a blog about this just a couple of weeks ago:

https://blogs.cisco.com/security/security-multi-tenancy-part-1-defining-the-problem