Cisco
Login
Search
Software Secure Firewall Threat Defense
Platform Secure Firewall Threat Defense Virtual
Activity Onboard

Device Operations Clustering for Threat Defense Virtual in a Public Cloud Deploy the Cluster in GCP Deploy the Cluster in GCP Manually Deploy Cluster Nodes Manually

Last updated: Jul 29, 2025

Deploy Cluster Nodes Manually

Deploy the cluster nodes so they form a cluster. For clustering on GCP, you cannot use the 4 vCPU machine type. The 4 vCPU machine type only supports four interfaces, and five are needed. Use a machine type that supports five interfaces, such as c2-standard-8.

Procedure

1

Create an instance template using the day 0 configuration (in the Metadata > Startup Script section) with 5 interfaces: outside, inside, management, diagnostic, and cluster control link.

See Cisco Secure Firewall Threat Defense Virtual Getting Started Guide.
2

Create an instance group, and attach the instance template.
3

Create GCP network load balancers (internal and external), and attach the instance group.
4

For GCP network load balancers, allow health checks in your security policy on the Management Center. See Allow Health Checks for GCP Network Load Balancers.
5

Add the control node to the Management Center. See Add the Cluster to the Management Center (Manual Deployment).
Previous topic Create the Day0 Configuration With a Customized Configuration for GCP Next topic Allow Health Checks for GCP Network Load Balancers