Firepower 4120 Chassis Replacement

[Sar@]

We have a Firepower 4120 unit in a pair that has failed for RAM failure after an FXOS upgarde. What is the best approach to replace the unit considering that it has multiple instances running?

I understand we can use the same SSD from the faulty unit but, in case, we need to rebuild all FTDs on the new SSD then what is the best approach. I have seen that I can take backup from the faulty unit and I can also do export of FTDs device config. Is there any approach better that would save us time and hassle? 

[Sar@]

any suggestions?

[Marius Gunnerud]

This link from Cisco has a walkthrough on how you can do it for both when you have a device backup and when you do not.

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221097-replace-faulty-unit-in-secure-firewall-t.html

Hope it helps

[Sar@]

Thanks! This is for single FTD. How about multi instances? I am not sure whether I need to restore the LINA part separately for each instance or just the backup and restore all instances FTD would work!

[Marius Gunnerud]

You will need to backup and restore each instance separately.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/threat-defense/use-case/multi-instance-sec-fw/multi-instance-sec-fw.html#import-or-export-the-chassis-configuration-jkhuit7tf

[Ruben Cocheno]

Sar@ 

This has to be meticulously planned, and below is a good guide to consider

 https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/threat-defense/use-case/multi-instance-sec-fw/multi-instance-sec-fw.html#import-or-export-the-chassis-configuration-jkhuit7tf