FPR-2110 HA configuration for Interface monitoring and Software

[inhamit]

Hi, Do we need to have the same type of interface for FPR-2110 HA Active/Standby configuration to core switches? For example, From FW 1, we have fibre connection to core switch A and from FW 2, we have copper connection to core switch B. will HA work on this design? 

I wanted to use FPR-2110 for Internal routing or as a router on stick option. Please suggest which Firewall software I should purchase to full fill this requirement to work with C9300x switches? Firepower threat defense software or ASA software? 

[inhamit]

yes, My mean was sub interfaces or Vlan SVI in firewall.

[inhamit]

What you mean by Users here? VPN user or something else?

[Rob Ingram]

@inhamit not VPN users, number of users behind the firewall would provide an indication on the number of connections and scale.

[inhamit]

User means Number of IP behind the firewall or can u give more hints to me?

[Rob Ingram]

@inhamit number of IP addresses behind the firewall making connections through the firewall, which provides information into the requirements when scaling the firewall.

[inhamit]

Which Value in datasheet I should look to compare with the user requirement?

[Rob Ingram · Accepted solution]

@inhamit maximum connections.

[MHM Cisco World · Accepted solution]

NO you can not must same interface Number
if you use SFP in FW1 then you must use SFP in FW2
and ALSO same INTERFACE NUMBER 

[MHM Cisco World]

https://community.cisco.com/kxiwq67737/attachments/kxiwq67737/discussions-network-security/1011038/1/Cisco%20Firepower%20Next-Generation%20Firewall%20(NGFW).pdf