FDM vs FMC on FTD2110

[umar.yaqub]

Hi Guys,

To manage Cisco FTD2110, we have two ways:

1. FirePower Threat Defense software (FTD)

2. Firesight Management Center (firepower management center).

My questions:  

- What is the difference between them?

- Using FTD, i can use all the security capabilities (IPS, URL, AMP...etc), correct?

- If i'm using FTD, is it enough? or still i need FMC?

[balaji.bandi]

FDM (Firepower Device Manager)

FMC  ( Firepower Management Center)

FTD :

you can only each device at a time. (same like ASDM, - only difference is not required Java).

FMC  :

FMC you can manage more devices centrally any geo locations and maintain configuration centrally, and updates pushed from centrally, centrally reporting and more.

supports :

FTD

FTDv

NGIPSv

ASA with Firepower

BB

[Rahul Govindan · Accepted solution]

Short answer is that fdm is the local management option in the device, while fmc is a separate management tool. Both can be used to manage ftd devices, although fdm is only on the lower end platforms as of today. They are also mutually exclusive, meaning you can only use one of the options to manage the ftd and cannot switch between both of them without losing the existing config. 

If you are using high availability or failover, the fdm is a no go as of today since it does not support ha. This is planned for a future release of fdm.

If you want a simple option to manage a single ftd device, like at a branch site, then use the fdm. All other cases, I would suggest the fmc as of today.