topic Re: Firepower Management Center in Network Security

Firepower Management Center

admins0011111 — Fri, 21 Feb 2020 17:33:57 GMT

Hi,

Can i safely shut down the FMC server? I have two Firepower devices connected to this server. Is there a description of what data they exchange other than policies upon request?

Re: Firepower Management Center

harmesh88 — Mon, 07 Oct 2019 17:40:48 GMT

Hi,

You can simply login in fmc and go to system configuration and click on process you will get option to shutdown FMC

Re: Firepower Management Center

admins0011111 — Mon, 07 Oct 2019 17:44:51 GMT

I know how do this. I need to know how safe it is to do on prod.

Re: Firepower Management Center

Firepowered — Mon, 07 Oct 2019 19:17:23 GMT

You need to elaborate, what do you mean by 'is it safe'?

Re: Firepower Management Center

Marvin Rhoads — Tue, 08 Oct 2019 02:09:10 GMT

It depends on what features you are using.

The managed devices will continue to pass traffic but some things (like URL lookups for non-cached URLs and sending files to the AMP cloud for dynamic analysis) happen via FMC. Also, the periodic (every hour or so) Security Intelligence updates are being pushed from FMC to the managed devices.

Of course the FMC is also the most common destination for any logged connection and intrusion events so it being offline will mean they cannot be synced from the managed devices. Some will be queued on the managed devices pending synchronization but that's limited.

I would not normally recommend shutting down the FMC in a production environment without an approved maintenance window. I would certainly never take it offline and leave it that way.