topic Virtual FMC Cluster in Network Security

Virtual FMC Cluster

erics08 — Wed, 20 Mar 2024 18:32:05 GMT

I currently have on virtual FMC in Azure vMware(AVS) and I would like to have a 2nd FMC in another Azure region for redundancy and so we can manage our FMC in the 2nd region during DR. Does anyone know if I can simply add a 2nd FMC and cluster it with the existing FMC? Is vFMC Clustering even an option. And if I can cluster these FMC's, if I spin up the new instance in the other region, and add it to the cluster, would it simply pull the config from the existing FMC? I would rather not have to manually add all the objects to the new FMC if I can cluster.

Thanks!

Re: Virtual FMC Cluster

Ruben Cocheno — Wed, 20 Mar 2024 19:19:37 GMT

@erics08

Never tried to build an FMC redundant on Azure, but don't see the reason why it won't work. You can add another FMC, and they will work as Primary/Secondary and any changes on the Primary will be replicated to the Secondary. Note that licensing is involved here as usual.

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-management-center/221089-configure-high-availability-on-fmc.html

Re: Virtual FMC Cluster

erics08 — Wed, 20 Mar 2024 20:30:27 GMT

Thank you. I guess a follow-up would be if the FMC's can be on Azure VMWare and one on Azure. The Azure VMWare is still considered VMware which is a bit confusing.