Cisco Security Cloud Control: On-Premises Firewall Management Center Integration

PDF

Cisco Security Cloud Control: On-Premises Firewall Management Center Integration

Troubleshoot cloud region synchronization issue in On-Premises Firewall Management Center high availability

Updated: July 12, 2026

Want to summarize with AI?

Log in

This collection guides users in resolving On-Premises Firewall Management Center cloud integration issues after high availability (HA) switchover, helping identify symptoms, understand applicability, and restore connectivity for non-U.S. region integrations without affecting device configurations or policies.

Issue

When an On-Premises Firewall Management Center high-availability (HA) pair that is integrated with Security Cloud Control in a non-US region experiences a switchover, cloud connectivity issues occur:

  • The newly active On-Premises Firewall Management Center automatically connects to the U.S. Region (default) instead of the originally configured non-US region.

  • The Tenant field displays None instead of showing the configured tenant.

  • Cloud integration errors prevent proper connectivity to Security Cloud Control.

Example scenario

Initial configuration

  • On-Premises Firewall Management Center HA pair configured to connect to Security Cloud Control in the EU (Europe) region

  • On-Premises Firewall Management Center primary: Active

  • On-Premises Firewall Management Center secondary: Standby

After switchover event

  • On-Premises Firewall Management Center primary experiences a failure

  • On-Premises Firewall Management Center secondary becomes the new active unit

  • On-Premises Firewall Management Center secondary (now active) automatically connects to the U.S. region (default) instead of the EU region

  • Tenant field displays None

Note

  • If the On-Premises Firewall Management Center HA pair is integrated with the U.S. region in Security Cloud Control, this procedure is not required.

  • The switchover does not affect Firewall Threat Defense device configurations, security policies, or any other On-Premises Firewall Management Center settings.

  • This procedure only restores cloud connectivity and does not require redeployment of policies to managed devices.

Problem cause

Cloud region and tenant configuration settings do not automatically synchronize from the active On-Premises Firewall Management Center to the standby On-Premises Firewall Management Center in an HA pair. During a switchover, the standby unit becomes active. However, it resets to the default (U.S. region) rather than retaining your previously configured region.

Solution

To restore cloud connectivity after failover, complete these steps on the newly active On-Premises Firewall Management Center:

  1. Log in to the On-Premises Firewall Management Center that is active after a switchover.

  2. Choose Integrations > Security Cloud Control.

    The Current Cloud Region drop-down list is configured to the US Region.

  3. Click Disable Security Cloud Control.

  4. Click Save.

  5. From the Current Cloud Region drop-down list, choose the same region that was configured in the previous active On-Premises Firewall Management Center.

  6. Click Enable Security Cloud Control.

  7. Click Save.