ASA FTD 6.3 Management

[Liversalts]

When deploying ASAs FTD version 6.3 with Firepower Services it looks like we have three Management options FMC, FDM, and CDO, and I believe only one can be used.

Previously we've used FMC however with the release of FTD 6.3 the FDM looks a better option, especially for managing a single deployment.

My question is for a single deployment can FMC provide any additional features over FDM ?

[ngkin2010]

Hi,

Not sure others buddy could find any official documents that list out the feature/function metric of FDM&FMC.

In my experience, FDM does not support failover/HA & etherchannel configuration. That's already make me go away from FDM!!

[balaji.bandi · Accepted solution]

I have looking for some comparision from notes from cisco live, here is the difference.

[Marvin Rhoads · Accepted solution]

As of release 6.3, FDM now supports high availability devices.

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/relnotes/firepower-release-notes-630/new_features.html#concept_D3A005FB2B0E45BBBDF5392C4D1DD138

[balaji.bandi]

if single Device FDM is good option, FMC have more options compare to FDM.

look at the compatability.

https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html

[Mohammed al Baqari]

For single site deployment, FMC is an overkill. However, for multisite FMC
is the way to go. FMC has more features compared to FDM such as
correlation, nmap, etc. Also, fmc provides better security visibility
because it correlates all events from multiple ftds.