Onboard an On-Premises Firewall Management Center to Security Cloud Control

Security Cloud Control provides these methods to onboard on-premises Firewall Management Centers:

(Recommended) Auto discover and onboard on-premises Firewall Management Center integrated with Cisco Security Cloud
Use on-premises Firewall Management Center credentials

For more information, see Connect Security Cloud Control to your Managed Devices.

Note

Security Cloud Control complements FMC by allowing you to:

Ensure consistent policy by sharing object management with FMCs.

For more information, see the Objects section in Managing On-Prem Firewall Management Center with Security Cloud Control.
Enable zero-touch provisioning of Firewall Threat Defense devices.

For more information, see Onboard a Device to On-Premises Firewall Management Center with Zero-Touch Provisioning.
Get a centralized view of Security Devices.

For more information, see Device and Service Management.
Use cloud CSDC and Cloud-Delivered Firewall Management Center.

For more information, see Cisco Secure Dynamic Attributes Connector.

Limitations and Guidelines

These are the limitations applicable to onboarding an on-premises Firewall Management Center:

When you onboard an on-premises Firewall Management Center, all devices registered to it are also onboarded. If a managed device is disabled or unreachable, Security Cloud Control may display that device in the Security Devices page. However, the system cannot send requests to or view information for the device.
Onboarding an on-premises Firewall Management Center does not cascade the policies in on-premises Firewall Management Center to Security Cloud Control or Cloud-Delivered Firewall Management Center. You can migrate a Firewall Threat Defense managed by on-premises Firewall Management Center to Cloud-Delivered Firewall Management Center using the built-in Migrate FTD to cdFMC feature, which brings all the policies linked to the device. For more information, see Migrate Threat Defense to Cloud-delivered Firewall Management Center.
We recommend creating a new user on on-premises Firewall Management Center specifically for Security Cloud Control communication with administrator-level permissions. If you onboard an on-premises Firewall Management Center and simultaneously log in to that on-premises Firewall Management Center using the same credentials, the onboarding process fails.
To create a new user on on-premises Firewall Management Center for Security Cloud Control communication, set the Maximum Number of Failed Logins for user configuration to zero.
For on-premises Firewall Management Centers running version 7.4 or later, if you experience a switchover and the FMC is no longer connected to the cloud, try disabling SecureX and then re-enabling it.