topic You are correct, about in Network Security

HA config firepower

ring zer0 — Sun, 10 Mar 2019 13:38:27 GMT

I have 2 ASA with SFR, both the ASA are configured with HA so the config on SFR needs to be same. I dont see any option on HA so I believe need to do config manually on both identical. I have added both the SFR in firepower management console and then added both of them into a single group. Is there a way I can do all the config on the group and then it gets applied to both of them?

Sure - that's one of the main

Marvin Rhoads — Fri, 01 Jul 2016 03:29:07 GMT

Sure - that's one of the main advantages to using groups in FMC. When you deploy your policies, deploy them to the group. That way each module in the HA pair is configured to behave the same.

thanks, but what about other

ring zer0 — Fri, 01 Jul 2016 13:10:23 GMT

thanks, but what about other configuration like assigning zones, creating objects or configuring external authentication servers. I believe these has to be done manually and the groups in FMC can only come handy when doing policies work.

You are correct, about

Ed Padilla Jr — Fri, 01 Jul 2016 15:42:46 GMT

You are correct, about pushing IPS, or Access Control policies. But in terms of changes of security zones, or objects those rather be manually. Just keep good documentation on those changes. My 2 cents