FTD config restore

Psmurali89 — Fri, 06 Oct 2023 08:52:12 GMT

Hi All,

I got FTD HA pair managed by FMC in production environment. I took the backup of both firewalls via FMC. and also FMC backup. I need to replicate the same setup in my home lab where i have 2 FTD and 1 FMC. Just want to check the below is the best way to do this?

* Connect HA cables between the firewalls and connect FMC.

* Upload the backup config locally to FTD

* In FMC, connect to CLI via console and configure initial setup for FMC with dummy IP.

* Log on to FMC via GUI and go to system-tools-scheduling-upload Backup.

* Once the backup is uploaded, select that backup and click restore - this will restore the FMC from backup.

* The FTD has to be restored locally in the FTD via SCP? Is there an option to upload the config to FTD itself rather using SCP? (one firewall at a time and after both firewall is online, I will be able to see both firewall sin FMC).

Re: FTD config restore

Marvin Rhoads — Sat, 07 Oct 2023 02:55:00 GMT

Restoring an FMC backup will include the original FMC IP address so you will have to change that from the ESXi console connection.

Device backups and restores need to be done from FMC in the Device Management page. Only restore the primary active firewall and then later add the secondary - it will sync from the primary. You will need the failover configuration details from the production FMC or associated FTD HA pair.

topic FTD config restore in Network Security

FTD config restore

Re: FTD config restore