FTDv Integration with AWS Transit Gateway

mcrukshanfernando — Tue, 05 Jan 2021 15:16:19 GMT

Hi Team,

I'm looking for a Cisco recommended design for deploying & integrating FTDv FW pair with AWS Transit Gateway.

Design Considerations -

The 2 firewalls need to be deployed in a separate AWS VPC with 2 availability zones. And traffic failover should be automatic in case of a FTDv or an Availability Zone failure.

I could find only the following design ( briefly described in https://www.youtube.com/watch?v=Utthj_CGfP8 ) under Cisco Secure Firewall YouTube channel. And in this design, 2 CSR 1000V routers are used in addition to the 2FTDv FWs.

I'm not sure why the 2 CSR 1000V routers are required here ?

Re: FTDv Integration with AWS Transit Gateway

vgaur — Thu, 09 Jan 2025 10:35:23 GMT

Since FTD unfortunately don't support GRE termination for some reason even though Cisco invented GRE, there's no direct way to connect the FTD with Transit Gateway.

I want to utilize BGP to share routing updates with Transit Gateway's routing table but stuck due to this limitation and I don't know if this is in the roadmap to allow GRE termination on FTD.

topic FTDv Integration with AWS Transit Gateway in Network Security

FTDv Integration with AWS Transit Gateway

Re: FTDv Integration with AWS Transit Gateway