Cisco Cisco Firepower Management Center 4000

two 3D8140s

two 3D9900s

up to four 3D8250s

a 3D8260 (a primary device and a secondary device)

a 3D8270 (a primary device with 40G capacity and two secondary devices)

a 3D8290 (a primary device with 40G capacity and three secondary devices)

up to four 3D8350s

a 3D8360 (a primary device with 40G capacity and a secondary device)

a 3D8370 (a primary device with 40G capacity and two secondary devices)

a 3D8390 (a primary device with 40G capacity and three secondary devices)

For more information about stacked configurations, see the FireSIGHT System Installation Guide. For 
more information about the malware storage pack, see the FireSIGHT System Malware Storage Pack 
Guide.

Do not attempt to install a hard drive that was not supplied by Cisco in your device. Installing an 
unsupported hard drive may damage the device. Malware storage pack kits are available for purchase 
only from Cisco, and are for use only with 8000 Series devices running Version 5.3 or later of the 
FireSIGHT System. Contact Support if you require assistance with the malware storage pack. See the 
FireSIGHT System Malware Storage Pack Guide for more information.

When you establish a stacked configuration, you combine the resources of each stacked device into a 
single, shared configuration.

You designate one device as the primary device, where you configure the interfaces for the entire stack. 
You designate the other devices as secondary. Secondary devices must not be currently sensing any 
traffic and must not have link on any interface.

Connect the primary device to the network segment you want to analyze in the same way you would 
configure a single device. See 

 for more information. Connect 

the secondary devices to the primary device using the stacked device cabling instructions found in the 
FireSIGHT System Installation Guide.

All devices in the stacked configuration must have the same hardware, run the same software version, 
and have the same licenses. If the devices are targeted by NAT policies, both the primary and secondary 
device must have the same NAT policy. See 

 for more information. 

You must apply updates to the entire stack from the Defense Center. If an update fails on one or more 
devices in the stack, the stack enters a mixed-version state. You cannot apply policies to or update a stack 
in a mixed-version state. To correct this state, you can break the stack or remove individual devices with 
different versions, update the individual devices, then reestablish the stacked configuration. After you 
stack the devices, you can change the licenses only for the entire stack at once.

After you establish the stacked configuration, the devices act like a single, shared configuration. If the 
primary device fails, no traffic is passed to the secondary devices. Health alerts are generated indicating 
that the stacking heartbeat has failed on the secondary devices. See 

 

for more information.