topic Re: [FTD] Active/Active Cluster Backup in Network Security

[FTD] Active/Active Cluster Backup

Nils.w — Thu, 22 Jun 2023 08:46:15 GMT

Hello together,

we running a Firepower 3130 Active/Active Cluster in our environment - actually we facing the issue that we cant backup that active/active cluster as also described in the Cisco guide.

Is there a way to perform the Backup through FMC, API or 3rd Party Software?

Thank you!

Kind regards

Re: [FTD] Active/Active Cluster Backup

MHM Cisco World — Thu, 22 Jun 2023 08:56:41 GMT

Backup config of cluster?

Re: [FTD] Active/Active Cluster Backup

Nils.w — Thu, 22 Jun 2023 09:07:17 GMT

Yes - actually we run a scheduled task every week for our Active/Standby Cluster - but we cant set it up for the active/active cluster.

Re: [FTD] Active/Active Cluster Backup

Rob Ingram — Thu, 22 Jun 2023 09:14:14 GMT

@Nils.w what version are you running? Backup and restore support for clustered devices was introduced in 7.3

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/730/management-center-admin-73/tools-backup.html

Re: [FTD] Active/Active Cluster Backup

Nils.w — Thu, 22 Jun 2023 10:25:16 GMT

Hey Rob! GREAT NEWS!!
We running 7.2.2 - is it enough to Update the FMC to 7.3? Or do we need to update the FTDs aswell?

Thank you!

Re: [FTD] Active/Active Cluster Backup

Rob Ingram — Thu, 22 Jun 2023 10:29:32 GMT

@Nils.w well the guide (previously provided) says "Back up the entire cluster from the management center, but restore nodes individually and locally from the threat defense CLI" - so you probably need to be running 7.3 on both the FMC and the FTD nodes to support backup and restore functionality.

Re: [FTD] Active/Active Cluster Backup

Nils.w — Thu, 22 Jun 2023 10:31:18 GMT

Alright! Thank you!