topic Re: Firepower Sensor Upgrade from FMC in Network Security

Firepower Sensor Upgrade from FMC

InTheJuniverse — Fri, 21 Feb 2020 16:50:40 GMT

Hello

Current SFR version on ASA is : 6.2.2-81

Our FMC version is : 6.2.3.5

I am trying to push Sensor update (6.2.3.5-52) from FMC to ASA Firepower Sensor, it says

"No valid appliances available for Cisco Network Sensor Patch 6.2.3.5-52

This update is intended for software versions greater than or equal to 6.2.3 and less than 6.2.3.5-52"

I am assuming upgrade path issue. What is the way forward? I don't want to perform upgrade manually.

Re: Firepower Sensor Upgrade from FMC

Marvin Rhoads — Thu, 21 Feb 2019 13:40:16 GMT

FMC won't automatically pull the prerequisite 6.2.3.0 update via the "Download Updates" button under System > Updates (or via scheduled task for the same).

For minor (and major) upgrades like that you must first download them on your local PC and then upload them to your FMC using the "Upload Updates" button under System > Updates.

Then you can install 6.2.3.0 from the GUI and follow up with the 6.2.3.5 patch.

You might consider first updating your FMC to the current 6.2.3.10 and then patching your sensor to that release.

Re: Firepower Sensor Upgrade from FMC

InTheJuniverse — Thu, 21 Feb 2019 14:40:10 GMT

Thanks Marvin.

Two questions

1) How do I know prerequisite for a version? I read this and didn't find anything related to prerequisite

2) Where do I download 6.2.3.0 ? I see nothing here, though there is

Re: Firepower Sensor Upgrade from FMC

Marvin Rhoads — Thu, 21 Feb 2019 15:43:31 GMT

@InTheJuniverse

1. In the patch release notes you will see the prerequisite for upgrade to the patch levels. For instance:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/623x/relnotes/Firepower_Release_Notes_623x/upgrade_procedures.html#id_62351

2. By 6.2.3.0 I should have said 6.2.3 (i.e. unpatched 6.2.3). The necessary upgrade file is "Cisco_Network_Sensor_Upgrade-6.2.3-83.sh.REL.tar" from the page you linked.

Re: Firepower Sensor Upgrade from FMC

InTheJuniverse — Fri, 22 Feb 2019 20:11:16 GMT

Interestingly, I uploaded the file 'successfully' but I can't see it under updates!!!

Re: Firepower Sensor Upgrade from FMC

Marvin Rhoads — Sat, 23 Feb 2019 02:19:25 GMT

I haven't come across that problem in the dozen or so FMCs I've worked with.

Re: Firepower Sensor Upgrade from FMC

InTheJuniverse — Mon, 25 Feb 2019 14:45:36 GMT

I figured out the problem. I downloaded same file twice, the second file's name obviously was appended with a (1) , this is the one I uploaded without renaming.

I deleted the file from /var/sf/updates and reuploaded and it worked like charm!!!!

Thanks again.

Re: Firepower Sensor Upgrade from FMC

sureshvn1981@gmail.com — Wed, 14 Apr 2021 17:48:36 GMT

Hi Marvin,

i am getting same error to perform the ASA5508 .

Please let me know to get the unpatched file "Cisco_Network_Sensor_Upgrade-6.2.3-83.sh.REL.tar"

unable to find the file on download link

https://software.cisco.com/download/home/286285773/type/286306337/release/6.2.2

Re: Firepower Sensor Upgrade from FMC

Marvin Rhoads — Fri, 16 Apr 2021 19:41:05 GMT

Suresh,

The unpatched file can be found further don on the same page:

https://software.cisco.com/download/home/286285773/type/286306337/release/6.2.3