Onboard an On-Premises Firewall Management Center to Security Cloud Control

Security Cloud Control provides these methods to onboard on-premises Firewall Management Centers:

(Recommended) Auto discover and onboard on-premises Firewall Management Center integrated with Cisco Security Cloud
Use on-premises Firewall Management Center credentials

For more information, see Connect Security Cloud Control to your Managed Devices.

Note

Security Cloud Control complements FMC by allowing you to:

Drive consistent policy through shared object management with FMCs.

For more information, see the Objects section in Managing On-Prem Firewall Management Center with Security Cloud Control.
Enable zero-touch provisioning of Firewall Threat Defense devices.

For more information, see Onboard a Device to On-Premises Firewall Management Center with Zero-Touch Provisioning.
Get a centralized view of Security Devices.

For more information, see Device and Service Management.
Leverage cloud CSDC and Cloud-Delivered Firewall Management Center.

For more information, see Cisco Secure Dynamic Attributes Connector.

Limitations and Guidelines

These are the limitations applicable to onboarding an on-premises Firewall Management Center:

Onboarding an on-premises Firewall Management Center also onboards all devices registered to it. If a managed device is disabled or unreachable, Security Cloud Control may display the device in the Security Devices page but cannot send requests to or view information for the device.
Onboarding an on-premises Firewall Management Center does not cascade the policies in on-premises Firewall Management Center to Security Cloud Control or Cloud-Delivered Firewall Management Center. However, you can migrate a Firewall Threat Defense managed by on-premises Firewall Management Center to Cloud-Delivered Firewall Management Center using the inbuilt Migrate FTD to cdFMC feature, which brings all policies linked to the device. For more information, see Migrate Threat Defense to Cloud-delivered Firewall Management Center.
We recommend creating a new user on on-premises Firewall Management Center specifically for Security Cloud Control communication that has administrator-level permissions. If you onboard an on-premises Firewall Management Center and then log in to that on-premises Firewall Management Center simultaneously using the same credentials, onboarding fails.
To create a new user on on-premises Firewall Management Center for Security Cloud Control communication, set the Maximum Number of Failed Logins for user configuration to zero.
For on-premises Firewall Management Centers running version 7.4 or older, if you experience a switchover and the FMC is no longer connected to the cloud, try disabling SecureX and then re-enabling it.