topic Re: FTD Replacement Question in Network Security

FTD Replacement Question

benolyndav — Sat, 29 Oct 2022 19:36:14 GMT

So FTD 2120 managed by FMC has failed I have a spare 2130 can I use this as a replacement I have backups of 2120 s this doable and how please.??

Thanks

Re: FTD Replacement Question

Rob Ingram — Sat, 29 Oct 2022 19:42:13 GMT

@benolyndav de-register the failed FTD from the FMC. Setup the basic mgmt interface configuration on the replacement FTD, register to the FMC, configure and apply the policies that were previously applied to the failed device, deploy policy to the FTD.

Re: FTD Replacement Question

balaji.bandi — Sat, 29 Oct 2022 19:45:58 GMT

Is this HA ? or a standalone appliance?

Take the FMC backup, do not make any changes.

if this is standalone :

1. make sure the code was running on the old one, make the same version of code on 2130 - so configuration can be pushed easily

2. configure the basic config as your OLD one (networking configuration), register with FMC

3. once FTD is registered with FMC. you can push the configuration from FMC. (the old configuration).

4. connect rest of the Physical connections to Live network and test it.

Hope that helps you to start with.

Re: FTD Replacement Question

benolyndav — Sat, 29 Oct 2022 19:54:23 GMT

Hi Rob

de-register the failed FTD from the FMC. Setup the basic mgmt interface configuration on the replacement FTD, register to the FMC, ok no worries

When you say configure what do you mean please.?

configure and apply the policies that were previously applied to the failed device, deploy policy to the FTD.

Re: FTD Replacement Question

Rob Ingram — Sat, 29 Oct 2022 20:03:00 GMT

Hi @benolyndav I was referring to configuring data interfaces and routing at a minimum, then you just assign the already configured policies (ACP/NAT etc) and deploy. Although if you re-register using the same name/mgmt IP address it usually associates to the previous object - so would already have the configuration information.

Re: FTD Replacement Question

benolyndav — Sun, 30 Oct 2022 10:29:18 GMT

Hi Rob

Thanks for that, so no issues with the replacement being a different model ?

Thanks

Re: FTD Replacement Question

Rob Ingram — Sun, 30 Oct 2022 10:45:23 GMT

@benolyndav I don't see why not, you aren't doing a backup/restore - you are applying the pre-existing policies and applying them to a different FTD.