topic Re: 2 FTD Interfaces in the same FMC security zone in Network Security

2 FTD Interfaces in the same FMC security zone

Rene Mueller — Mon, 08 Jul 2024 14:34:56 GMT

I have a FTD HA-Pair configured in FMC and it's inernal and external Interface is assigned to a Internal-Security Zone and an External-Security zone. So far so good. Now I added another FTD HA-pair (branch office) to the FMC and asking myself if it is possible to add its Interfaces to the same Security Zones, so that I don't need to add "duplicate" zones. Question is, can I add Interfaces from different HA-pairs to the same Security Zone or is it better to have every FTD-pair use it's own logic and Security Zones.

Re: 2 FTD Interfaces in the same FMC security zone

Rob Ingram — Mon, 08 Jul 2024 14:42:15 GMT

@Rene Mueller yes you can configure the interfaces of another FTD with the same security zone.

Re: 2 FTD Interfaces in the same FMC security zone

MHM Cisco World — Wed, 10 Jul 2024 09:58:27 GMT

Thanks

MHM

Re: 2 FTD Interfaces in the same FMC security zone

Marius Gunnerud — Mon, 08 Jul 2024 16:14:17 GMT

Yes, I have 6 FTDs where I have standardized the interface names and zones so that all my remote office firewall configurations can be streamlined. So, for example, all my LAN interfaces are a member of INT-ZONE-A and all my Outside interfaces are a member of OUT-ZONE-A. I have also done the same with VTIs. I like doing things this way as it makes management and setup of interface rules much easier and efficient.