We certainly want to move on from eStreamer and it will eventually be replaced with fully qualified events in clear text like syslog direct from the FMC. We've already begun transitioning by offering syslog off the appliance for Intrusion, Connection and File events. I don't have a solid date on the estreamer API however. We're stuck with it for a while.
A number of customers have asked for support for multiple FMCs from the same TA. There's a hi level design but its not committed yet.
... View more