Question: is FTD needs to connect to the internet Or Not?

[najarian]

Hello Friends,

as you know, FMC needs to connect to the internet to get Updates for Talos or Updates and etc through the OOB MNG network.

So, I just wrote a NAT in MNG-Firewall which is connected to the MNG network for FMC.

The question is: is FTD needs to connect to the internet also Or Not?

thanks

Najarian

CCIE #65604

[Rob Ingram]

@najarian the FMC needs to recieve the updates somehow, but it does not necessarily need to communicate with the internet from an FTD it's managing......assuming there is another firewall that it can route traffic through?

[najarian]

Hello Rob,

Yes, the OOB network has separated with its own Firewall totally. my question is if FTD needs internet access also through its management network or not?

cheers

[balaji.bandi]

yes, it required internet access for the device to get updates and other information from the cisco cloud.

[Rob Ingram · Accepted solution]

@najarian it's the FMC that download updates and upgrade packages, the FMC then deploys these to the FTD devices. Even if you were doing AMP cloud lookups, these are sent to the FMC which sends to the cloud.