Firepower Management Center

[admins0011111]

Hi,

Can i safely shut down the FMC server? I have two Firepower devices connected to this server. Is there a description of what data they exchange other than policies upon request?

[harmesh88]

Hi,

You can simply login in fmc and go to  system configuration and click on process  you will get option to shutdown FMC 

[admins0011111]

I know how do this. I need to know how safe it is to do on prod.

[Firepowered]

You need to elaborate, what do you mean by 'is it safe'?

[Marvin Rhoads · Accepted solution]

It depends on what features you are using.

The managed devices will continue to pass traffic but some things (like URL lookups for non-cached URLs and sending files to the AMP cloud for dynamic analysis) happen via FMC. Also, the periodic (every hour or so) Security Intelligence updates are being pushed from FMC to the managed devices.

Of course the FMC is also the most common destination for any logged connection and intrusion events so it being offline will mean they cannot be synced from the managed devices. Some will be queued on the managed devices pending synchronization but that's limited.

I would not normally recommend shutting down the FMC in a production environment without an approved maintenance window. I would certainly never take it offline and leave it that way.