topic Re: FTD Multi-Instance question in Network Security

FTD Multi-Instance question

sphere365 — Fri, 21 Feb 2020 16:39:23 GMT

Hi there experts 🙂

Long waited feature is finally out,but info about is very hard to find so i'll try getting some answers here.

I have a project that involves very large number of contexts - 200. Mainly for purpose of dividing routing tables.

Idea was to get four 9300 series FTDs that would run ASA with multi-contex, but when Cisco announced multi-instance roll out we were under impresion that we could use this feature.

After reading Andrew Ossipov blog i got a feeling that multi-instance will be limited to just running separate ftd/asa image.

So, what will be max number of those multi-instances that can run in FTDs? My logic tell's me max 88 (because of CPU count on 9300).

Cheers

Re: FTD Multi-Instance question

Abheesh Kumar — Sat, 12 Jan 2019 06:26:38 GMT

Which SM module are you using..??
SM-24, SM-36, SM-44

Re: FTD Multi-Instance question

sphere365 — Sat, 12 Jan 2019 23:32:43 GMT

Hey Abheesh,

atm non 🙂

We are still looking at our options.

This is more about gathering info before we make our final move.

Cheers

Re: FTD Multi-Instance question

Marvin Rhoads — Sun, 13 Jan 2019 05:14:35 GMT

Multi-instance container scale limitations are documented here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/fxos241/cli-guide/b_CLI_ConfigGuide_FXOS_241/logical_devices.html#id_77542

Only FTD is supported, not ASA logical devices. The maximum is 14 with Firepower 9300 and SM-44.