Figure 35: Separate Management Network
Edge Network Deployment
Both the FMC and FTD require internet access from management for licensing and updates.
The following figure shows a possible network deployment for the Firepower 1100 where the Firepower 1100
acts as the internet gateway for the FMC and FTD managamement.
In the following diagram, the Firepower 1100 acts as the internet gateway for the management interface and
the FMC by connecting Management 1/1 to an inside interface through a Layer 2 switch, and by connecting
the FMC and management computer to the switch. (This direct connection is allowed because the management
interface is separate from the other interfaces on the FTD.)
Cisco Firepower 1100 Getting Started Guide
89
Firepower Threat Defense Deployment with FMC
Review the Network Deployment