Hello all, we are in the process of having a separate network for physical security devices add. This supports cameras and door sensors etc… We don’t want to put this on the same production network and we don’t wish to manage this ourselves.
The idea is to create a zone for this on our current FMC which supports 4 FTD’s in HA pairs. Two locally and two a remote site. I was wondering if it is possible to have two separate Access Control Policies residing on the FTD’s? So we create a new ACP from the current one with all lovely rules and push that down to the HA pairs of FTD 2130’s, currently but probably going to get upgraded in another year to something else.
The other plan is to simply create a zone for the new devices with a new subnet that doesn’t overlap our production. A currently unused port on the firewall provisioned for them. This is probably the easiest and recommended method.
