topic Re: FTDv in HA in Azure in Network Security

FTDv in HA in Azure

suryakant.chavan — Fri, 21 Feb 2020 15:50:14 GMT

Hi,

We have two FTDv in Azure and want to configure HA in between; understand that, in Azure FTDv in HA will be stateless but don't find any document referring how to configure it. There are few link that we require to configure ILB and ELB for FTDv in HA but not clear what steps require from FTDv side and from Azure load balancer, also want to understand how routing or NATing (while traffic leaving towards Internet and private DC) will happen while traffic pass.

Your kind assistance will be greatly appreciated.

Re: FTDv in HA in Azure

jimholla — Fri, 01 Jun 2018 16:43:51 GMT

Customer Doc:

https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/ha-failover-cloud.pdf

A nice YouTube on deployment:

https://www.youtube.com/watch?v=WPOrMBJogBM

Re: FTDv in HA in Azure

suryakant.chavan — Tue, 05 Jun 2018 15:15:25 GMT

Thanks Jimholla,
The referred link is for ASAv and we have FTD in Azure..what i understand that in HA agent supported on ASAv and not FTD.

Re: FTDv in HA in Azure

jimholla — Tue, 05 Jun 2018 15:20:45 GMT

I overlooked the fact that it is FTDv and not ASAv. My apologies.

Re: FTDv in HA in Azure

suryakant.chavan — Tue, 05 Jun 2018 15:38:33 GMT

Thanks for looking in my issue ..

Any idea how to configure FTD in HA in Azure or any reference link.

Re: FTDv in HA in Azure

rchoi — Fri, 08 Jun 2018 16:57:51 GMT

The FTDv in Azure does not support HA.

From the current quick start guide updated April 2018: https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/azure/ftdv-azure-qsg.html

Under unsupported features:

High Availability (active/standby)

If you search around, you can find some people that have used custom JSON's to deploy 2x FTDv's into an availability set and then use an internal load balancer and external load balancer around them to have some resemblance of availability.

Re: FTDv in HA in Azure

suryakant.chavan — Fri, 08 Jun 2018 16:58:47 GMT

Thanks Richo,

Do you have link or reference document to understand step by step config.

I have gone through youtube video created by Anubhav swami, but that also did not give clear idea.

Re: FTDv in HA in Azure

ys1338001 — Fri, 24 Jan 2020 18:23:26 GMT

Native HA for FTDv is currently not supported.

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/azure/ftdv-azure-qsg.html

There are other ways to achieve a resemblance of HA as stated in other posts.