Connecting Branch FTD to Head Office FMC

[fatalXerror]

Hi, 

Would like to have your inputs about how can I connect my branch FTD to my FMC? Typically, I connect my FTD to FMC via the mgmt port of the FTD device however, in my branch office, I don't have any management switch.

If I can deploy a management switch, where should I position it directly to my WAN?

thanks

[Rob Ingram]

@fatalXerror since 6.7 you can manage an FTD from the data interface. On the Firewall in front of the FMC configure NAT for the FMC, create a firewall rule to allow inbound tcp/8305 to the FMC from the branch FTDs.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/roadmap/management-center-new-features-by-release.html

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/720/management-center-device-config-72/get-started-device-management.html#Cisco_Concept.dita_a3adf1ee-a270-4ff4-8b7b-3f9a3f4f1636

[balaji.bandi]

If I can deploy a management switch, where should I position it directly to my WAN?

If you do not have special OOB management, you can use Inband to FTD using FMC

how is your branch connectivity over Internet or MPLS ?

check device management basic :

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/configuration/guide/fpmc-config-guide-v67/device_management_basics.html

As @Rob Ingram mentioned the Port is important for the FMC to communicate with FTD.

[MHM Cisco World]

Use WAN interface of FTD to connect to FMC 

Check cisco video for more info

https://youtu.be/3m1cY7VxBo8?si=UFzsq7Ap_fKPLvDo

MHM