topic Re: Device is missing from FMC backup list in Network Security

Device is missing from FMC backup list

sachin garg — Tue, 21 Jan 2025 01:27:26 GMT

FMC VM Version 7.2.5 ; FMC standalone,

There are 6 devices on FMC under device TAB and deployment push is fine.

FTD - 7.2.5 - FTD is in cluster, transparent mode

We are planning to upgraded the setup , at that time we came to know that device is missing from device list for the backup TAB.

Re: Device is missing from FMC backup list

ahollifield — Tue, 21 Jan 2025 09:56:03 GMT

I don't have an answer but why 7.2 and not 7.4 or 7.6?

Re: Device is missing from FMC backup list

sachin garg — Tue, 21 Jan 2025 10:46:51 GMT

SO , what can be captured and CLI as a logs to identify OR restarted as a service so that it can be checked further?

Re: Device is missing from FMC backup list

Marvin Rhoads — Tue, 21 Jan 2025 12:39:33 GMT

Backups for devices in a cluster are not supported on FMC 7.2.

See Table 2 here: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/tools-backup.html

That feature was added in FMC 7.3.

Reference:
https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/730/threat-defense-release-notes-73.html

As @ahollifield was implying, you would be better served by running 7.4.2.1 (current suggested release) or 7.6.

Re: Device is missing from FMC backup list

Balaraju Ramesh — Wed, 22 Jan 2025 17:50:16 GMT

Hi @Marvin Rhoads

Thanks for your response. We are planning to upgrade the FMC to the version 7.4.2.1, before proceeding with the upgrade, we need to take a backup of FTD in cluster.

DO we have an alternate option to take FTD backup, from FTD CLI? Please update us on the alternate options you are aware of.

Thanks,

Balaraju

Re: Device is missing from FMC backup list

Marvin Rhoads — Thu, 23 Jan 2025 06:28:38 GMT

It's not required to take a device backup prior to upgrading. Personally I never do so.

Especially for a transparent mode firewall, there is minimal configuration that would be included in a device backup (interface definitions mostly since there is not routing or IP addressing in transparent mode). The cluster bootstrap configuration is stored in the Firepower Chassis Manager and not in FMC or on the cluster members per se.