topic Re: Best Way to RMA/Replace Multiple FTD Boxes in Network Security

Best Way to RMA/Replace Multiple FTD Boxes

Lucas Phelps — Fri, 21 Feb 2020 15:45:17 GMT

Due to the Intel clocking bug that affected multiple Cisco products, I've got to replace and RMA 20+ Cisco 5506 FirePower Threat Defense Appliance appliances.

I'd like for the devices to get the exact same configuration as the one that is getting RMA'd, in the easiest and fastest way possible.

Any tips or guidance on how to go about this?

Thank you!

Re: Best Way to RMA/Replace Multiple FTD Boxes

Marvin Rhoads — Fri, 11 May 2018 11:31:12 GMT

Deregister the device(s) being replaced from FMC.

Install the new one and run through basic setup to bootstrap the device.

Then register it to FMC, associate it with the same policies and deploy.

Re: Best Way to RMA/Replace Multiple FTD Boxes

Lucas Phelps — Wed, 16 May 2018 17:19:57 GMT

For each device I add into FMC, I have to setup my interfaces, Bridge Group Virtual interfaces, IP addresses, security zones on those interfaces, etc.

Is there any way to preserve that for each device and apply it to the new hardware?

Re: Best Way to RMA/Replace Multiple FTD Boxes

Marvin Rhoads — Thu, 17 May 2018 12:37:28 GMT

@Lucas Phelps - Unfortunately not at this time.

Cisco does allow for configuration of those bits via API so it can be scripted. That's not a trivial exercise for most of us old school network engineers. We can only hope that they make this simpler moving forward.

Re: Best Way to RMA/Replace Multiple FTD Boxes

Lucas Phelps — Fri, 18 May 2018 15:14:47 GMT

It probably wouldn't be that big of a deal, if I wasn't dealing with so many RMAs. Thanks for the reply