topic Re: Options/Methods for Remote management of FTD in Network Security

Options/Methods for Remote management of FTD

lcaruso — Wed, 03 May 2023 21:11:59 GMT

Hello,

Can anyone point me to a known working method of staging a FPR1010 offsite and then shipping to site preconfigured to be managed remotely either with FMC at a different site or CDO? This site will not be using the built-in mgmt. port, so everything needs to be done from the outside. I will have remote console access.

Thanks much.

Re: Options/Methods for Remote management of FTD

MHM Cisco World — Wed, 03 May 2023 21:23:19 GMT

I have a little Info. but I share with you what in my mind

From Cisco
Caution: Right now Cisco does not have any option to migrate FDM firepower configuration to an FMC and vice-versa, take this into consideration when you choose what type of management you configure for the FTD installed in the firepower 2100. <<- I think it same for FPR1100

so you can access to FPR via FMC (remotely) not using FTD management IP but using NAT-ID to register FRP (since the IP will change using NAT-ID is better than change the register IP of FPR).

thanks
MHM

Re: Options/Methods for Remote management of FTD

lcaruso — Wed, 03 May 2023 22:15:39 GMT

Thank you for your response. I will sketch that out and post here.

Re: Options/Methods for Remote management of FTD

lcaruso — Wed, 03 May 2023 22:39:32 GMT

This sounds like the same idea. Has anyone tried this?

https://community.spiceworks.com/topic/2469266-change-public-ip-of-a-remote-ftd?from_forum=45

More ideas

https://finkotek.com/cisco-ftd-setup-for-remote-site-deployment/

Re: Options/Methods for Remote management of FTD

MHM Cisco World — Wed, 03 May 2023 23:17:59 GMT

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and-troubleshoot-firep.html

Re: Options/Methods for Remote management of FTD

lcaruso — Thu, 04 May 2023 02:23:33 GMT

Great link. Thanks!