topic FTD Backup Cluster mode in Network Security

FTD Backup Cluster mode

ashleybabajee — Tue, 28 Sep 2021 08:57:52 GMT

Hello,

I have 2 FTD on HA and 2 FTDs on Cluster mode, on FMC i am not able to download configuration for FTDs on cluster mode.

Is there any way via GUI to perform that or can we just save a running config via cli ?

Device mode 4115 version 6.5 , FMC 6.5

Thanks

Re: FTD Backup Cluster mode

Milos_Jovanovic — Tue, 28 Sep 2021 09:54:50 GMT

Hi @ashleybabajee,

Backup of FTD Cluster is not supported. You can find that information in the config guide.

Instead, you should backup FMC and FXOS. In case your device goes down, you would rebuilt it from FXOS backup, it would be bootstraped from there. You can follow this guide in order to replace broken Cluster unit. In case of the FMC, situation is clear.

BR,

Milos

Re: FTD Backup Cluster mode

ashleybabajee — Tue, 28 Sep 2021 11:12:12 GMT

Thanks @Milos_Jovanovic , make sense what you said.

In any case the FTD are sensor with only management IP locally configurable, and all configurations are done via FMC which is the controller. Removing and adding a new sensor should be easy by this design, so in which cases do we need the FTD backup for?

Re: FTD Backup Cluster mode

Milos_Jovanovic — Tue, 28 Sep 2021 12:59:11 GMT

FTD backup is usefull with HA setup. When one device from HA goes down, in order to recover it, you would need to add new/blank/reimaged device to FMC, to recreate interfaces, to break current HA and to create new one, with remaining device as active one. Instead, you could just restore backup, which would contain necessary info for the system to come back in HA, without doing all of this manually.

Again, assuming you are running multi-instance, youw would need to follow the guide from here for FPR4100 chassis, and then from here, to restore instance itself.

BR,

Milos

Re: FTD Backup Cluster mode

mumbai.support — Mon, 12 Aug 2024 07:34:17 GMT

Hey Milos,

Thanks for the information. I have a query regarding the cluster backup for FTD. I understand that if one of the FTD cluster devices breaks due to any scenario, we can replace the broken FTD. However, my main question is: what if both FTD devices are down due to some scenario? How can we replace them without a control link?

Re: FTD Backup Cluster mode

felipe.bsilva — Wed, 02 Oct 2024 19:45:26 GMT

I have the same question!!!