topic Re: How to backup a 3100 cluster? in Network Security

How to backup a 3100 cluster?

red2play — Thu, 29 Dec 2022 18:31:01 GMT

On the documentation, you can't backup a cluster. How do I backup the configurations on the FTDs on the FMC? I do get that the configurations are mostly on the FMC's but do they cover everything?

Backup is not supported for:

threat defense clusters
The threat defense virtual for the public cloud

Re: How to backup a 3100 cluster?

Rob Ingram — Thu, 29 Dec 2022 18:57:59 GMT

@red2play IMO the FMC backup should be sufficient and no need to backup the FTD. The FMC has the policies which are deployed to the FTD.

If an FTD fails and is replaced, you just need to define the mgmt IP address and register to the FMC, which then re-deploys the policies from the FMC.

Re: How to backup a 3100 cluster?

balaji.bandi — Thu, 29 Dec 2022 20:21:56 GMT

Most of the config for the FTD stored in FMC, so I would suggest to take the backup of FMC (out of the box)

Also check some limitation guidelines for the backup and restore :

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/710/management-center-admin-71/tools-backup.html

Re: How to backup a 3100 cluster?

Marvin Rhoads — Tue, 03 Jan 2023 13:31:31 GMT

The newest release of FMC (i.e., version 7.3 as of this posting) include support for cluster backup. References:

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/roadmap/management-center-new-features-by-release.html#Cisco_Concept.dita_99a036dd-7071-4aa7-8bb6-e3e3567dd8c7

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/730/management-center-admin-73/tools-backup.html#concept_042F458B5E1243F19CA97E67F6B21197

While it's true that the FMC backup includes all policies and objects, individual node configurations (interfaces, routing, cluster settings etc.) are included in a device or cluster backup.

Re: How to backup a 3100 cluster?

red2play — Tue, 03 Jan 2023 15:27:22 GMT

Thank you, this is the answer I was looking for because if a physical node fails, how would you recover the node with an FMC backup? I know you can transfer the policies individually but its not the same as a node backup. Thank you. I can take this to management.