Cisco Secure Firewall - Cisco Defense Orchestrator Series: Low Touch Provisioning

In this video, Aaron reviews how to quickly onboard a Cisco Secure Firewall Threat Defense appliance to the cloud-delivered Firewall Management Center (cdFMC) using low-touch provisioning (LTP).
Timestamps:
00:16 - LTP Overview
01:26 - LTP Requirements
02:16 - Add FTD to CDO
03:38 - Monitor Onboarding Process
04:34 - Workflows
05:07 - Device Sync
05:40 - Manage Device in cdFMC
Want to know more on CDO?www.cisco.com/c/en/us/product...
Apply for a trial CDO Account here: getcdo.com
Additional CDO Documentation is found here: docs.defenseorchestrator.com
Ask Questions and Learn More at Our NetSec Community Site:
community.cisco.com/t5/networ...

[@truwarrior22]

Can the WAN interface use a DHCP private IP then moved to the ISP router once the configuration is loaded? Not all ISPs support DHCP to provide the external IP. CDO FMC support ISE-PIC for passive user identity?

[@truwarrior22]

Q. How does cloud-delivered Firewall Management Center communicate with realms for user agent? A. Cloud-delivered Firewall Management Center uses on-premises Secure Firewall Threat Defense as a proxy for fetching this information from identity servers.

[@ahack210]

Yes, once the device is managed by cdFMC the configuration of interfaces can be managed by cdFMC. There is also an "auto-rollback" feature that can be enabled in the event that something goes wrong with the interface configuration and connectivity to cdFMC is lost.