Support
Product Support
Security
Cisco Security Cloud Control
Configuration Guides

Cisco Security Cloud Control: On-Premises Managed Firewall Threat Defense Migration to Cloud Management

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Security Cloud Control: On-Premises Managed Firewall Threat Defense Migration to Cloud Management

Expand all sections

About this content

Understand the migration

About Firewall Threat Defense migration to Cloud Management
End-to-end Firewall Threat Defense migration workflow
Event and Analytics Management options during Firewall Threat Defense migration

Plan the migration

Supported features
Unsupported features
Migration guidelines and limitations for User Identity
Migration guidelines and limitations for VPN configuration
Supported On-Premises Firewall Management Center and Firewall Threat Defense software versions for migration

Migrate Firewall Threat Defense devices

Prerequisites for migrating Firewall Threat Defense to Cloud Management
Migrate Firewall Threat Defense to Cloud Management

Manage and validate the migration

Review and manage Firewall Threat Defense migration job
Configure migration notifications
Verify Firewall Threat Defense connectivity with Security Cloud Control

Troubleshoot migration issues

Use the Troubleshoot Feature for Failed Migrations

Cisco Security Cloud Control: On-Premises Managed Firewall Threat Defense Migration to Cloud Management

About this content

Updated: September 29, 2026

Full Cisco Trademarks with Software License

Understand the migration

Learn what changes when you move Firewall Threat Defense management from an on-premises Firewall Management Center to Security Cloud Control. This chapter covers the migration flow, evaluation period, licensing, and analytics choices.

Plan the migration

Prepare for a supported migration by checking versions, feature support, identity and VPN requirements, connectivity, and device readiness.

Migrate Firewall Threat Defense devices

Use the migration procedure to select eligible devices, choose migration options, and start a job in Security Cloud Control.

Manage and validate the migration

Monitor migration progress, choose whether to commit or revert device management, and verify connectivity after migration. Use reports and notifications to review job outcomes.

Troubleshoot migration issues

Diagnose failed or partially successful migrations by identifying the failed stage and following the matching recovery guidance.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.