topic FTD 1120 Remote Deployment to Branch Office Managed by FMCv in Network Security

FTD 1120 Remote Deployment to Branch Office Managed by FMCv

Alan Inman — Mon, 31 Jan 2022 16:40:41 GMT

The FTD 1120 is currently paired to the FMCv using the diagnostic/management port, both FTD and FMCv are in HQ at the moment.
However, the branch office that the FTD 1120 will be deployed to only has Outside Internet. No tie-back to HQ
If I check "Enable management on this interface for the Firepower Management Center" will it convert from the management port to the Outside (see screenshot) Interface allowing the FTD to be managed by the FMCv via the Internet?
The FTD and FMCv are both running 7.0.1
Once deployed to the branch office. I will build an S2S VPN tunnel back to HQ
The FTD will replace a CradlePoint we have at the branch office. The CradlePoint is managed through the cloud and has an S2S VPN tunnel coming back to HQ

The "Enable management on this..." is fairly new and documentation is light. I did look through the admin guide and it mentions it but is vague about switching from management to the Outside interface.

Thank you,

Alan

Re: FTD 1120 Remote Deployment to Branch Office Managed by FMCv

Alan Inman — Mon, 31 Jan 2022 16:43:47 GMT

Better shot of the screenshot I mentioned in the original post

Re: FTD 1120 Remote Deployment to Branch Office Managed by FMCv

Rob Ingram — Mon, 31 Jan 2022 16:51:04 GMT

@Alan Inman there is a bit more involved, refer to this link it has all the steps involved to manage over the data interface. You will need to ensure you have a NAT setup on the firewall in front of the FMC, to translate from the public IP address to the real IP address of the FMC on tcp/8305.