Firewall Ftd hardening using fmc

[muhammad-abbas]

Hi everyone, 

I have deployed ftd 3105 and ftd 3120 firewalls HA pair. Managing these HA through FMC 1700 physical appliance . I have to deploy minimum security baseline on these if someone knows about any documents which have complete navigation and policies of MSB it will helpful.

Thanks 

[Kasun Bandara]

hi @muhammad-abbas , you can refer to cisco guide in below link for normal hardening.

Cisco Secure Firewall Threat Defense Hardening Guide, Version 7.6 - Cisco

but there are specific hardening standers for different countries and regions based on security governance bodies. one of such examples is CIS benchmark system. you can use that kind of hardening guide to finetune the baselines.

[muhammad-abbas]

here in this guide we have suggestions to do, i think there might be some strict configs that we have to configure according to CISA. let me know if there is some doc like i am thinking.

[Kasun Bandara]

@muhammad-abbas hi, yes. you can refer to CIS benchmark is that kind of document. there is 2 levels. L1 is considered as must follow unless strict limitation. L2 is advanced and recommend if its doable.