Register FTD with FMC

ravell
3 min read

Introduction#

The Cisco Firewall Management Center (often referred to as Firepower Management Center, or FMC) is a centralized management platform for Cisco's Firepower next-generation firewalls (NGFWs). It provides a unified console to manage and monitor multiple Cisco Firepower appliances, delivering visibility and control over network security policies, events, and threats.

Cisco Firewall Management Center provides comprehensive, centralized management of Cisco Firepower appliances and security policies. It offers advanced threat detection, deep visibility, policy management, and reporting to enhance network security, streamline firewall management, and reduce operational complexity across large, distributed environments.

Cisco Documentation#

Configure, Verify, and Troubleshoot Firepower Device Registration..

OS Version#

DeviceVersion
FMC7.4.2.1
FTD7.4.2.1

Topology#

Topologi FMC dengan FTD
Topologi FMC dengan FTD

Configuration#

Setup FTD

In First initial setup, login using username admin and password Admin123 as default credential. Then press enter 2x to continue.

Setup New Password FTD
Setup New Password FTD

Enter the new password based on criteria above.

Configure all the requirement below.

Setup Network Setting
Setup Network Setting

after you configure, verify the configuration.

bash
Copy code to clipboard
Open code in new window
Disable hover highlighting
1> show network
Verify the connectivity between FTD and FMC is reachable
Ping to Management
Ping to Management

The expert command on Cisco FTD provides advanced access to the underlying Linux operating system, allowing you to perform tasks such as troubleshooting, system diagnostics, and configuration that aren't possible through the regular FTD CLI.

Register FTD to FMC

Next lets register FTD into FMC. Input the command below to identify the management center that will manage this threat defense.

bash
Copy code to clipboard
Open code in new window
Disable hover highlighting
1> configure manager add <FMC-IP-Address> <Secret-Key>

FMC-IP-Address using TLS-1.3-Encrypted communication channel between two devices. Secret-key is registration key one-time use of your choice that you will also specify on the FMC when register FTD. Max key must not exceed 37 characters.

Valid characters include alphanumerical characters (A-Z, a-z, 0-9) and the hypen (-)

Register FTD to FMC
Register FTD to FMC

you can verify the command by using:

bash
Copy code to clipboard
Open code in new window
Disable hover highlighting
1>show managers
Verify Register FTD to FMC
Verify Register FTD to FMC

the registration status is still pending because we need to add this FTD from FMC as well.

Register FMC to FTD

Login in into FMC > Device > Device Management > Add Device

Register FMC to FTD
Register FMC to FTD
  • Choose Registration Key or Serial Number
  • Host > Your FTD IP Address
  • Display Name > Your FTD Hostname
  • Registration Key > Your Secret Key
  • Group > None
  • Access Control Policy > ACP for FTD

Do the same for other Firewalls

Verify Register FMC to FTD
Verify Register FMC to FTD

From task list, you can verify discovery status FTD to FMC.

Verification

Now let's verify that FTD-INET-01 and FTD-INET-02 is controlled by the FMC In FTD side, check by using show managers

Manager Verification from FTD
Manager Verification from FTD

In FMC side, you can check the status from Device > Device Management.

FMC Managed Device Status
FMC Managed Device Status