SNCF — Securing Networks with Firepower — Question 147

A security engineer is adding three Cisco FTD devices to a Cisco FMC. Two of the devices have successfully registered to the Cisco FMC. The device that is unable to register is located behind a router that translates all outbound traffic to the router’s WAN IP address. Which two steps are required for this device to register to the Cisco FMC? (Choose two.)

Answer options

• A. Reconfigure the Cisco FMC to use the device’s private IP address instead of the WAN address.
• B. Configure a NAT ID on both the Cisco FMC and the device.
• C. Reconfigure the Cisco FMC to use the device’s hostname instead of IP address.
• D. Remove the IP address defined for the device in the Cisco FMC.
• E. Add the port number being used for PAT on the router to the device’s IP address in the Cisco FMC.

Correct answer: B, D

Explanation

The correct actions involve configuring a NAT ID on both the Cisco FMC and the device to facilitate proper communication through the NAT environment, which is essential for registration. Removing the IP address defined for the device in the Cisco FMC ensures that any previous misconfiguration does not hinder the new registration process. The other options do not address the NAT-related issue effectively.