Disable Cloud-Delivered Firewall Management Center high availability

Disable high availability for Cloud-Delivered Firewall Management Center to break the HA pair and manage devices independently.

Breaking HA allows you to control device management from either console or stop managing devices altogether.

High availability for Firepower Management Centers is not available in versions 6.0 or 6.0.1. This procedure is relevant when you need to break an existing HA pair and reassign device management.

Use this task when you want to manage devices from a single console or discontinue device management from both consoles.

After breaking HA, you may need to re-register device licenses. Access control policies remain on the standby Cloud-Delivered Firewall Management Center.

Procedure

Step 1

Log into one of the Cloud-Delivered Firewall Management Centers in the high availability pair.

Step 2

Choose Integration > Other Integrations, and then choose High Availability.

Step 3

Choose Break High Availability.

Step 4

Choose one of the options for handling managed devices:

  • To control all managed devices with this Cloud-Delivered Firewall Management Center, choose Manage registered devices from this console. All devices will be unregistered from the peer.

  • To control all managed devices with the other Cloud-Delivered Firewall Management Center, choose Manage registered devices from peer console. All devices will be unregistered from this Cloud-Delivered Firewall Management Center.

  • To stop managing devices altogether, choose Stop managing registered devices from both consoles. All devices will be unregistered from both Cloud-Delivered Firewall Management Centers.

Note

  • If you choose to manage the registered devices from the secondary Cloud-Delivered Firewall Management Center, the devices will be unregistered from the primary Cloud-Delivered Firewall Management Center. Devices will then be registered to the secondary Cloud-Delivered Firewall Management Center. License applications on these devices are deregistered due to the high availability break operation. You must re-register (enable) licenses on the devices from the secondary Cloud-Delivered Firewall Management Center. For more information see Assign licenses to devices.

  • The standby management center retains the access control policies after the HA break is complete.

Step 5

Click OK.