Backing up a Virtual FMC

[matty-boy]

Hi guys,

One of our customers has a virtual FMC running on VMWare.

I had assumed that the best method for backing up the FMC would be to take VMWare snapshots.

However, I've just read this: https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fmcv/fpmc-virtual/fpmc-virtual-vmware.html#id_82728

Which states the following:-

###################################################

Limitations

The following limitations exist when deploying for VMware:

• Cisco Firepower Management Center Virtual appliances do not have serial numbers. The System > Configuration page will show either Noneor Not Specified depending on the virtual platform.

• Cloning a virtual machine is not supported.

• Restoring a virtual machine with snapshot is not supported.

• Restoring a backup is not supported.

• VMware Workstation, Player, Server, and Fusion do not recognize OVF packaging and are not supported.

###################################################

So this suggests that restoring from a snapshot is not supported. Does it just not work, or can it cause some kind of corruption (I don't see how) or what?

Without the ability to use snapshots, if the VM or host was to have some sort of catastrophic failure, the only option would be to re-install it from fresh, apply any patches and VDB to match what was running before and then restore from an FMC application backup. This would take much longer than a snapshot restore. :(

Anyone got any thoughts on this?

Thanks,

Matt.

[Marvin Rhoads]

Snapshots can break running systems with underlying databases. This is also true for ISE. If you shutdown the server and snapshot it while it's quiescent, it should be OK.

Just my suggestion - not TAC-approved or an official Cisco position.

[NeWGuy1109]

Hello, Just trying to understand the statement...
FMC snapshots can only be taken after shutting down the FMC ? also, wudnt snapshot work in case of a single FMC restoration ?
Thanks

[nspasov]

Snapshots are not supported and definitely not recommended. I have personally tested this before and you run into a lot of issues especially if the snapshot was taken before any configuration changes/updates were made. 

The best thing to do here is to utilize the supported backup/restore or move to an H/A solution which at the moment requires hardware appliances. 

Thank you for rating helpful posts!