FMC virtual High Availability Design

[Kristiane Araujo]

Does the FMC virtual on premises support High Availability design synchronizing the policy configuration between them ?

If so is there any bundled license or do I have to double SKU´s in CCW ? 

[Rob Ingram]

@Kristiane Araujo  the FMC support Active/Standby HA where one appliance is the active unit and manages devices. The standby unit does not actively manage devices. The active unit writes configuration data into a data store and replicates data for both units, using synchronization where necessary to share some information with the standby unit. 

Each device requires the same licenses whether managed by a single management center or by management centers in a high availability pair (hardware or virtual).

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/760/management-center-admin-76/system-ha.html#id_21087

Virtual Platform Requirements

High availability is supported for the following public cloud platforms:

• Amazon Web Services (AWS)

• Oracle Cloud Infrastructure (OCI)

• Microsoft Azure

And these on-prem/private cloud platforms:

• Cisco HyperFlex

• Kernel-based virtual machine (KVM)

• Microsoft Hyper-V

• VMware vSphere/VMware ESXi

The management centers must have the same device management capacity (not supported on FMCv2) and be identically licensed. You also need one threat defense entitlement for each managed device. For more information, see License Requirements for Management Center High Availability Configurations.

[MHM Cisco World]

vFMC before was not support HA nownit support 

Check this link

https://www.cisco.com/c/en/us/td/docs/security/firepower/670/relnotes/firepower-release-notes-670/m_features_functionality.html?bookSearch=true#Cisco_Concept.dita_9ec1deee-f5e6-45b2-b790-177094453a84

MHM

[Kristiane Araujo]

Thanks Ron for sheding the light ! Great.