topic Cisco FTD on 5508 , how to convert from FDM to FMC in Network Security

Cisco FTD on 5508 , how to convert from FDM to FMC

aslam.bajwa — Tue, 12 Mar 2019 09:07:45 GMT

Hi All ,

i have installed FTD 6.2 on Cisco ASA 5508X , and by mistake i have selected FDM during installation . is there any way to convert it to FMC.

Please advice

Log into the command line

Marvin Rhoads — Mon, 27 Mar 2017 04:18:01 GMT

Log into the command line interface shell (clish) and use the command

configure manager delete

Reference:

http://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html#wp4284863723

many Thanks Marvin...

aslam.bajwa — Mon, 27 Mar 2017 09:30:31 GMT

many Thanks Marvin...

Re: Log into the command line

Herald Sison — Fri, 05 Feb 2021 06:18:07 GMT

sir how about the licenses? i have already activated the licenses of my FTD via FDM. my licenses includes cisco anyconnect, url filtering, malware protection and threat protection.

do i need to unregister my license on FTD via FDM and then perform the configure manager delete command and then activate the license in the FMC?

Re: Cisco FTD on 5508 , how to convert from FDM to FMC

Marvin Rhoads — Fri, 05 Feb 2021 12:57:01 GMT

@Herald Sison yes you should unregister your licenses with Cisco from FDM first and then let FMC handle the licenses after that. FMC acts as a sort of proxy for licenses of the managed devices.

Re: Cisco FTD on 5508 , how to convert from FDM to FMC

Herald Sison — Fri, 05 Feb 2021 14:47:06 GMT

Thank you so much sir. i have unregistered my license via FDM already and i noticed that the base license was also removed. is it ok?

Re: Cisco FTD on 5508 , how to convert from FDM to FMC

Marvin Rhoads — Fri, 05 Feb 2021 17:51:13 GMT

Yes, once you unregister it is expected that the new FMC registration will restore all licenses, including Base.

Re: Cisco FTD on 5508 , how to convert from FDM to FMC

Herald Sison — Sat, 06 Feb 2021 15:00:06 GMT

Hi Sir,

1 last thing, after removing all licenses in my FTD via FDM and confirmed that all licenses are now vacant then also after entering configure manager delete and the FTD resets to default settings i have few questions after that.

1) will my current FTD version which is 6.6.1 will reset and go back to its original version which is 6.3?

2) after the reset has done how to access the FTD again so that i can configure its interface ip addresss and add it to my FMC? Do need to access the FDM again and set all interfaces IP there?

thats all for now sir

thank you so much for your time

Re: Cisco FTD on 5508 , how to convert from FDM to FMC

Marvin Rhoads — Sun, 07 Feb 2021 02:46:18 GMT

1. De-registering your licenses does not affect the FTD version.

2. FMC connection is via the management address. That address remains unchanged even as you change from FDM to FMC management. Just go into the management cli via ssh or console and use the "configure manager add <FMC address> <registration key>" command to change to FMC management. You can then perform all subsequent changes (interfaces, routing, access control policies, NAT, VPN etc.) from FMC.

Re: Cisco FTD on 5508 , how to convert from FDM to FMC

Herald Sison — Thu, 11 Feb 2021 08:26:42 GMT

thank you so much so for the advise. this is a good help from you.