topic Re: Need to Upgrade Firepower 2110 to stable version in Network Security

Need to Upgrade Firepower 2110 to stable version

dan hale — Tue, 12 Mar 2019 14:13:35 GMT

Hi, we have two Cisco Firepower 2110 in an HA running FTD version 6.2.2.2 and FMC 6.2.2.2. Sometime ago we ran into the below defect.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg06695

We are now ready to update....any reason why I shouldn't go to version 6.3.0 of the FMC/FTD...both are direct upgrade paths. Just curious if 6.3.0 version is stable or if I should stay at a lower version.

Thanks,

Dan

Re: Need to Upgrade Firepower 2110 to stable version

Abheesh Kumar — Mon, 14 Jan 2019 17:34:03 GMT

My suggestion is to goto 6.2.3.7 as i think this is much stable than 6.3.0

HTH
Abheesh

Re: Need to Upgrade Firepower 2110 to stable version

Nico.Sauerbrey — Mon, 14 Jan 2019 17:53:29 GMT

If u dont need some Features that 6.3 brings with it and u dont have a lab where u can test the 6.3 it would be better to upgrade to a higher 6.2.3.x version. If u just wanna upgrade with a minimum impact u can upgrade to Hotfix D from 6.2.2 which exactly fixing this Bug (see https://www.cisco.com/c/en/us/td/docs/security/firepower/hotfix/Firepower_Hotfix_Release_Notes/Firepower_Hotfix_Release_Notes_chapter_011.html)

Re: Need to Upgrade Firepower 2110 to stable version

MajidShirzadeh — Mon, 14 Jan 2019 22:17:45 GMT

I would stay on 6.2.3 for couple months then jump to 6.3.

Re: Need to Upgrade Firepower 2110 to stable version

dan hale — Thu, 17 Jan 2019 16:34:18 GMT

Thank you all for your input!

Re: Need to Upgrade Firepower 2110 to stable version

mnair — Wed, 23 Jan 2019 20:37:30 GMT

running 6.2.3.6 on 9300

thanks

Re: Need to Upgrade Firepower 2110 to stable version

dan hale — Tue, 29 Jan 2019 17:33:37 GMT

Hi All,

Had the chance to talk with one of our Cisco SE's and he recommended to go to 6.3 on the FMC but, stay on 6.2.3.7 for FTD.

I will say that if your are in the same situation as I was on 6.2.3 of the FMC and jump up to 6.3 fully read the upgrade guide. I skimmed thru it and over looked the section where the "readiness check" will not work if you are on 6.1 and 6.2 and migrate to 6.3. I overlooked this and a call to TAC confirmed it. I thought that the upgrade package that I had initially downloaded was not valid.

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/relnotes/firepower-release-notes-630/upgrade.html#id_86226

Thanks,

Dan