Pulling firewalls out of Firesight

[Colin Higgins]

I have some ASA firewalls with Firepower modules registered with a Firesight Management Server.

We need to take a few of these firewalls and move them to a different Firesight Managment system managed by a different group. I have some policies assigned to the firewalls currently.

What are the consequences of removing the firewalls from the existing system? Is it simply a matter of deleting them and re-registering the ASAs with the new system? Will I run into any database or licensing problems?

[Marvin Rhoads]

Once you delete them from your current system, the licenses assigned to them will revert to the pool of available licenses in your FireSIGHT Management Center.

Historical records (connections, IOCs etc.) from those devices will be retained in the original FireSIGHT.

The modules themselves will retain whatever policy you had deployed to them until you register them to the new FireSIGHT Management Center, license them from it and deploy policies from there.