FTD configuration in DR site from fmc

[ShareefKooliyodan0444]

Dears

wishing you Happy New year 

Please share any configuration documentation for FTD configuration in DR site from fmc . 

I have installed and configured  2 ftd in HO, and one in in DR site. 

Thank you .. 

[sadks]

Hi ShareefKooliyodan0444,

What configuration are you exactly looking for?

You can refer to the following for device registration: https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118596-configure-firesight-00.html

[ShareefKooliyodan0444]

DR FTD configuration, i need sample configuration and design 

[sadks]

Hi,

I don't think you will find any Cisco document with a sample configuration and design specifically for your DR FTD. You can however look into the generic release notes and config guides and design as per your organizational security policies.

Do reach out if you have any further queries on those.

You can also reach out to the right teams within Cisco for design assistance if you have those valid subscriptions.

[Colsen899]

Certainly! It's crucial to ensure your Disaster Recovery (DR) setup is well-documented. You might want to check the official FTD configuration documentation from FMC for guidance on configuring and maintaining your setup across the Head Office (HO) and DR sites seamlessly. 

[Ruben Cocheno]

@ShareefKooliyodan0444 

Check the Cisco Validated Designs available and see if any of them resume with what you trying to do and/or use them as a guide.

https://www.cisco.com/c/en/us/solutions/enterprise/design-zone-security/index.html

[Marius Gunnerud]

You have given us very limited information about the site (data center, or something else) and setup, what you want to achieve, how service / data replication will happen, are there web servers, etc.?

The point of a disaster recovery site is that it is usually to have a completely separate setup from the production site with only the periodic data or service replication taking place.  So in essence a DR site should be a mirror image of the production site so the configuration should be exactly the same as for the production site, with the exception of public IPs perhaps.