cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
542
Views
0
Helpful
2
Replies

FMC HA on Azure supported or not? Version 7.2 in 2023

Carlos T
Level 1
Level 1

Hi,

Please can you confirm if FMC H.A is supported on Azure. I am running version 7.2

On one document is not mentioning Azure, and on the other it is mentioning Azure:

 

According to the 7.2 FMC Admin guide, H.A is only supported on Vmware, AWS and OCI, but not mentioned for Azure.

Cisco Secure Firewall Management Center Administration Guide, 7.2 - High Availability [Cisco Secure Firewall Management Center] - Cisco

 

Virtual Platform Requirements

Requirements for establishing high availability (HA) using two management center virtual virtual appliances:

  • Supported on management center virtual for VMware, AWS, and OCI.
  • Supported on management center virtual 10, 25, and 300. Not supported on management center virtual 2.
  • The high availability pair must have the same device management capacity. For example, you cannot pair the management center virtual 25 with the management center virtual 300.
  • To manage threat defense devices, you need two identically licensed management center virtual instances, as well as one threat defense entitlement for each managed device. If you are managing Version 7.0 and earlier Classic devices only, you do not need management center virtual entitlements. For more information, see License Requirements for Management Center High Availability Configurations.

 

 

On the FMC Getting Starting guide it is mentioned it is supported on Azure

Cisco Secure Firewall Management Center Virtual Getting Started Guide - Deploy the Management Center Virtual On the Microsoft Azure Cloud [Cisco Secure Firewall Management Center Virtual] - Cisco

 

High Availability support

  • Management Center Virtual High Availability (HA) is supported on the management center virtual models.
  • To establish the management center virtual HA, management center virtual requires an extra management center virtual license entitlement for each Secure Firewall Threat Defense (formerly Firepower Threat Defense) device that it manages in the HA configuration. However, the required threat defense feature license entitlement for each threat defense device has no change regardless of the management center virtual HA configuration. See License Requirements for threat defense devices in a High Availability Pair in the Secure Firewall Management Center Device Configuration Guide for guidelines about licensing.
  • If you break the management center virtual HA pair, the extra management center virtual license entitlement is released, and you need only one entitlement for each threat defense device. See High Availability in the Secure Firewall Management Center Device Configuration Guide for more information and guidelines about high availability.

 

 

Thanks,

CT

2 Replies 2

Marvin Rhoads
Hall of Fame
Hall of Fame

I was told by a Cisco product manager that the feature did not make the cutoff date for 7.2 in the Azure environment.

Some of the Cisco docs have not been updated to reflect this fact.

Thanks Marvin,

I see the latest release available to download is 7.3.1.

Maybe they can confirm if for 7.3.1 H.A for FMC is supported on Azure?

 

Thanks,

CT

Maybe they can confirm if on 7.3.1 is

 

 

Review Cisco Networking products for a $25 gift card