How to backup a 3100 cluster?

[red2play]

On the documentation, you can't backup a cluster.  How do I backup the configurations on the FTDs on the FMC?  I do get that the configurations are mostly on the FMC's but do they cover everything?

Backup is not supported for:

• threat defense clusters

• The threat defense virtual for the public cloud

[Rob Ingram]

@red2play IMO the FMC backup should be sufficient and no need to backup the FTD. The FMC has the policies which are deployed to the FTD.

If an FTD fails and is replaced, you just need to define the mgmt IP address and register to the FMC, which then re-deploys the policies from the FMC.

[balaji.bandi]

Most of the config for the FTD stored in FMC, so I would suggest to take the backup of FMC (out of the box)

Also check some limitation guidelines for the backup and restore :

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/710/management-center-admin-71/tools-backup.html

[Marvin Rhoads]

The newest release of FMC (i.e., version 7.3 as of this posting) include support for cluster backup. References:

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/roadmap/management-center-new-features-by-release.html#Cisco_Concept.dita_99a036dd-7071-4aa7-8bb6-e3e3567dd8c7

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/730/management-center-admin-73/tools-backup.html#concept_042F458B5E1243F19CA97E67F6B21197

While it's true that the FMC backup includes all policies and objects, individual node configurations (interfaces, routing, cluster settings etc.) are included in a device or cluster backup.

[red2play]

Thank you, this is the answer I was looking for because if a physical node fails, how would you recover the node with an FMC backup?  I know you can transfer the policies individually but its not the same as a node backup.  Thank you.  I can take this to management.