How to replace a faulty FTD device without downtime

[Kareemullah-Shaik]

Hi
We need to know the procedure about that how to replace a faulty FTD device without downtime?

[marce1000]

  - FYI : https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221097-replace-faulty-unit-in-secure-firewall-t.html

 M.

[Blue_Bird]

Hello Kareemullah-Shaik,

Which series of FTD you are using ?

To replace a faulty Cisco Firepower Threat Defense (FTD) device without downtime, you can restore a backup if you have one.

Restore from backup
--------------------
If you have a backup of the faulty device, you can restore it to replace the device:
Verify that the backup file is valid and that the FTD has the same software version as the backup.
Remove the faulty device from the network or power it off.
Restore the backup.
The device will reboot and automatically connect to the FMC.

You should do this process with careful consideration...

Also please go through the following link, you will find similar discussion:

https://community.cisco.com/t5/network-security/ftd-replacement/td-p/3854693

Best regards
******* If This Helps, Please Rate *******

[MHM Cisco World]

NO way sorry, that why FW HA have big advance than standalone FW

you need to replace FW in maintenance window.

MHM

[Marius Gunnerud]

Downtime depends on if the setup is a HA setup or a standalone FTD.  If you have the FTD in HA then you can do this without downtime.  If you have a standalone FTD, then you would need to plan and prepare / configure the new FTD without connecting the data interfaces (i.e. the interfaces on the switch or FTD are in shutdown) to the network.  Then once ready shutdown the interfaces for the old FTD and then enable the interfaces connected to the new FTD.