topic Re: FMC virtual High Availability Design in Network Security

FMC virtual High Availability Design

Kristiane Araujo — Thu, 23 Jan 2025 18:12:04 GMT

Does the FMC virtual on premises support High Availability design synchronizing the policy configuration between them ?

If so is there any bundled license or do I have to double SKU´s in CCW ?

Re: FMC virtual High Availability Design

Rob Ingram — Thu, 23 Jan 2025 18:24:25 GMT

@Kristiane Araujo the FMC support Active/Standby HA where one appliance is the active unit and manages devices. The standby unit does not actively manage devices. The active unit writes configuration data into a data store and replicates data for both units, using synchronization where necessary to share some information with the standby unit.

Each device requires the same licenses whether managed by a single management center or by management centers in a high availability pair (hardware or virtual).

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/760/management-center-admin-76/system-ha.html#id_21087

Virtual Platform Requirements

High availability is supported for the following public cloud platforms:

Amazon Web Services (AWS)
Oracle Cloud Infrastructure (OCI)
Microsoft Azure

And these on-prem/private cloud platforms:

Cisco HyperFlex
Kernel-based virtual machine (KVM)
Microsoft Hyper-V
VMware vSphere/VMware ESXi

The management centers must have the same device management capacity (not supported on FMCv2) and be identically licensed. You also need one threat defense entitlement for each managed device. For more information, see License Requirements for Management Center High Availability Configurations.

Re: FMC virtual High Availability Design

MHM Cisco World — Thu, 23 Jan 2025 18:26:33 GMT

vFMC before was not support HA nownit support

Check this link

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/relnotes/firepower-release-notes-670/m_features_functionality.html?bookSearch=true#Cisco_Concept.dita_9ec1deee-f5e6-45b2-b790-177094453a84

MHM

Re: FMC virtual High Availability Design

Kristiane Araujo — Thu, 23 Jan 2025 18:27:23 GMT

Thanks Ron for sheding the light ! Great.