https://community.cisco.com/t5/network-security/firepower-9300-and-a-new-security-module/m-p/4496489#M1084774 <P>Hello,</P><P>I have two FP9300 devices and each of those boxes have an old security module - slot1 (two slots are empty).</P><P>Multi-instance deployment is used + HA failover FTD pair was configured between both 9300 devices.</P><P>Now I want to add a brand new security module to each of the boxes into slot 2 (but still preserve/leave the old security module). In addition to that I want to move the FTD logical devices into the new security modules (much more powerful compared to the old ones).</P><P>Is my understanding correct that I need to break HA on FMC and configure HA pair from scratch?</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 02 Nov 2021 11:24:45 GMT Maciej Waliszko 2021-11-02T11:24:45Z https://community.cisco.com/t5/network-security/firepower-9300-and-a-new-security-module/m-p/4496489#M1084774 <P>Hello,</P><P>I have two FP9300 devices and each of those boxes have an old security module - slot1 (two slots are empty).</P><P>Multi-instance deployment is used + HA failover FTD pair was configured between both 9300 devices.</P><P>Now I want to add a brand new security module to each of the boxes into slot 2 (but still preserve/leave the old security module). In addition to that I want to move the FTD logical devices into the new security modules (much more powerful compared to the old ones).</P><P>Is my understanding correct that I need to break HA on FMC and configure HA pair from scratch?</P><P>&nbsp;</P><P>&nbsp;</P> Tue, 02 Nov 2021 11:24:45 GMT https://community.cisco.com/t5/network-security/firepower-9300-and-a-new-security-module/m-p/4496489#M1084774 Maciej Waliszko 2021-11-02T11:24:45Z https://community.cisco.com/t5/network-security/firepower-9300-and-a-new-security-module/m-p/4496553#M1084775 <P>The new SMs will indeed need to be configured from scratch with new logical devices. They can match the current configurations (being careful to leave data plane interfaces shutdown) and then be swapped over by shutting down the interfaces on the current pair and bringing them up on the new pair.</P> Tue, 02 Nov 2021 13:48:43 GMT https://community.cisco.com/t5/network-security/firepower-9300-and-a-new-security-module/m-p/4496553#M1084775 Marvin Rhoads 2021-11-02T13:48:43Z