Migrate FDM to FMC using VPN S2S

[ivan.martin]

Hi my name is Ivan.

I have  1 FTD manage with FDM on my remote site. FW connect main site with another FW's in HA using vpn s2s.  I need to migrate FDM to FMC. FMC is working in the main site and managing FW's in HA.

If I will change directly to FMC, I will lose connectivity on my remote site, and maybe remote FW will not complete the register.

Can I have another option to register my remote FW?. Maybe Can I configure on FTD using CLI vpn site to site?

Thanks you.

REgards, Ivan.

[Marvin Rhoads]

Unfortunately there's not an easy way to do this. You will have to recreate the configuration on FMC for the remote firewall that is currently FDM-managed.

If your version supports it, you can use the outside interface at the remote site for FMC management and register via that. The main site end will have to have a static NAT for the FMC and allow the incoming traffic (tcp/8305) for this to work.