Options/Methods for Remote management of FTD

[lcaruso]

Hello,

Can anyone point me to a known working method of staging a FPR1010 offsite and then shipping to site preconfigured to be managed remotely either with FMC at a different site or CDO? This site will not be using the built-in mgmt. port, so everything needs to be done from the outside. I will have remote console access. 

Thanks much.

[MHM Cisco World]

I have a little Info. but I share with you what in my mind 

From Cisco
Caution: Right now Cisco does not have any option to migrate FDM firepower configuration to an FMC and vice-versa, take this into consideration when you choose what type of management you configure for the FTD installed in the firepower 2100. <<- I think it same for FPR1100

so you can access to FPR via FMC (remotely) not using FTD management IP but using NAT-ID to register FRP (since the IP will change using NAT-ID is better than change the register IP of FPR).

thanks 
MHM

[lcaruso]

Thank you for your response. I will sketch that out and post here.

[lcaruso]

This sounds like the same idea. Has anyone tried this? 

https://community.spiceworks.com/topic/2469266-change-public-ip-of-a-remote-ftd?from_forum=45

More ideas

https://finkotek.com/cisco-ftd-setup-for-remote-site-deployment/

[MHM Cisco World · Accepted solution]

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and-troubleshoot-firep.html

[lcaruso]

Great link. Thanks!