We use Firepower Management Center (FMC) 2000 appliances to manage Firepower SFR software modules in Cisco ASA 5500-Xs, and have the following question relating to sizing storage for Firepower configuration and Event backups:
Link to Cisco documentation below states that when defining a Backup Profile on the FMC the "Back Up Events" option is used to archive the entire event database:
https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Backup_and_Restore.html#ID-2200-000001ba
If we perform a weekly backup of the entire event database these backups will ever increase in size consuming a lot of space presumably? and ultimately becomes very large. There doesn't appear to be an option for doing incremental backups.
Can anyone out there share any good practice approaches they have used to backing up Firepower Events? and the storage space considerations they have taken to managing these ever increasing event database backups?
Thanks
