Firepower Best Practices

dvalinho — Fri, 21 Feb 2020 17:53:57 GMT

Hello Experts,

I would like to know:

1) What are the best practices while deploying Cisco Firepower (FTD / IPS) in standalone/ HA/ cluster? Sometimes it just look like the boxes can't handle traffic no matter the design (I may be wrong but we mostly have to use prefilter)

2) How to determine the amount of session handled by a Firepower device?

3) Is there any way to backup the configurations when we run Cluster? (Impossible from FMC as of now) but does anyone has a way to back it up via another method (scripting?🤔)

I have faced several situations where the boxes constantly couldn't handle traffic but was unable to determine the current session. Note that I just logged the end of connections.

Thanks all for the feedback.

topic Firepower Best Practices in Network Security

Firepower Best Practices