An organization is migrating their Cisco ASA devices running in multicontext mode to Cisco FTD devices. Which action must be taken to ensure that each context on the Cisco ASA is logically separated…

Question

Options

• AAdd a native instance to distribute traffic to each Cisco FTD context.
• BAdd the Cisco FTD device to the Cisco ASA port channels.
• CConfigure a container instance in the Cisco FTD for each context in the Cisco ASA.
• DConfigure the Cisco FTD to use port channels spanning multiple networks.

• A
  5% (3)
• B
  11% (6)
• C
  80% (45)
• D
  4% (2)

Explanation

On Cisco ASA, multi-context mode allows a single physical device to run multiple virtual firewalls, called "contexts," each with separate configurations and policies. The equivalent solution in Cisco FTD is the multi-instance (container instance) feature. This allows you to carve up the physical appliance into multiple FTD instances (or containers), each operating as an independent firewall with its own dedicated interfaces, resource allocation, and policy sets. Each migrated ASA context maps to a separate FTD container instance to maintain isolation and separation of security policies and network segmentation. This setup ensures each virtual firewall from ASA becomes its own logically isolated FTD instance after migration. https://community.cisco.com/t5/security-blogs/migrating-asa-multi-context-to-ftd-multi- instance/ba-p/3893465

No community discussion yet for this question.