topic Re: Cisco Firepower Management Center (FMC) Configuration in Network Security

Cisco Firepower Management Center (FMC) Configuration

sumedh0991 — Wed, 12 Feb 2025 12:43:07 GMT

Hello Community,

I have configured my Cisco Firepower Management Center (FMC) using the UI. Now I want to retrieve these configurations using any of the following methods,

CLI
API
File Export

Also, I want to verify whether my device setup is correct.

Any guidance would be greatly appreciated.

Thanks!

Re: Cisco Firepower Management Center (FMC) Configuration

Marvin Rhoads — Thu, 13 Feb 2025 03:26:48 GMT

FMC backups are done via the backup scheduling feature in the GUI. You can save backups locally on the FMC and copy them off to an external location as you like to setup a remote storage target so that the backups go there automatically. The backups are tar.gz files and not really easily human-readable though.

"Correct" varies widely according to what your requirements are.

Re: Cisco Firepower Management Center (FMC) Configuration

anuoluwapo-bankole — Fri, 28 Mar 2025 15:38:34 GMT

Hello Mr. Marvin,

Why are we having N/A or manage under the chassis in FMC? Some will have the device's name under the chassis.

Example:

Re: Cisco Firepower Management Center (FMC) Configuration

Marvin Rhoads — Fri, 28 Mar 2025 16:09:49 GMT

There are multiple modes of chassis and logical device across the different hardware platforms. You are seeing an artifact of that in your screenshots.

Re: Cisco Firepower Management Center (FMC) Configuration

anuoluwapo-bankole — Fri, 28 Mar 2025 16:18:09 GMT

Hello sir,

Are you saying it's a normal thing to see such under your chassis in FMC

Re: Cisco Firepower Management Center (FMC) Configuration

Marvin Rhoads — Fri, 28 Mar 2025 16:22:13 GMT

Yes - completely normal and not a cause for concern.

Re: Cisco Firepower Management Center (FMC) Configuration

anuoluwapo-bankole — Fri, 28 Mar 2025 16:56:34 GMT

Hello Sir,

So, why do we have different outputs for the various FTD devices in the chassis column, and what do you think the correct settings should be?

Re: Cisco Firepower Management Center (FMC) Configuration

Marvin Rhoads — Mon, 31 Mar 2025 02:57:58 GMT

It's not a matter of you making settings. It's just a reflection that some platforms offer a separate chassis management function and others do not. Bottom line is that is is not anything that affects the device passing traffic and is generally not anything you need to be concerned about how it looks.

Re: Cisco Firepower Management Center (FMC) Configuration

sumedh0991 — Tue, 01 Apr 2025 05:11:35 GMT

Thanks Marvin for the reply,

I'm not worried about the backup of the device.

I want the configuration to be fetched from the via command like "show running-config" that we used to do in the other Cisco devices or API.

Re: Cisco Firepower Management Center (FMC) Configuration

Marvin Rhoads — Wed, 02 Apr 2025 14:56:36 GMT

@sumedh0991 are you asking about FTD device backup? You can get that via "show running-config" but it will not be 100% complete as it references objects that are not stored in human-readable plain text but rather as database entries. Same thing for the IPS rules, Security Intelligence lists etc.

Re: Cisco Firepower Management Center (FMC) Configuration

Marvin Rhoads — Wed, 02 Apr 2025 14:57:21 GMT

@anuoluwapo-bankole

The cosmetic bug on the 1000 series is fixed in 7.7.0 (and should be included in the upcoming 7.6.1).

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwj80790

Re: Cisco Firepower Management Center (FMC) Configuration

sumedh0991 — Thu, 31 Jul 2025 10:20:07 GMT

@Marvin Rhoads What about the API?

I am referring to https://www.cisco.com/c/en/us/td/docs/security/firepower/740/api/REST/secure_firewall_management_center_rest_api_quick_start_guide_740/About_The_Firepower_Management_Center_REST_API.html
Does it cover the CIS Cisco Firepower Threat Defense Benchmark 1.0.0 https://workbench.cisecurity.org/benchmarks/817

Re: Cisco Firepower Management Center (FMC) Configuration

leonardo-panbasten — Mon, 20 Oct 2025 14:22:16 GMT

Hi @Marvin Rhoads

I want to perform a migration from vFMC to FMC Appliance in HA. Will there be any traffic downtime during the migration process, and what are the best practices?

Thanks

Re: Cisco Firepower Management Center (FMC) Configuration

Marvin Rhoads — Tue, 21 Oct 2025 15:08:30 GMT

@leonardo-panbasten please open a new thread since your question is not directly related to the original post.