topic Re: Upgrade sensorr and FMC in Network Security

Upgrade sensorr and FMC

sahrizal123 — Fri, 21 Feb 2020 15:58:52 GMT

Hi,

I plan to upgrade sensor as below ( no downtime as current only monitor mode )

not comfortable to reimage.

Current version

FMC - 5.4.1.6
sensor fw01 - 5.4.1
sensor fw02 - 5.4.1.5

phase 1

FMC : 5.4.1.6 > 5.4.1.10

Sensor: 5.4.1.0 > 5.4.1.5 > 5.4.1.10

phase 2

FMC : 5.4.1.10 > Version 6.0.0 Pre-Installation Package > Version 6.0.0 > Version 6.0.1 Preinstall > Version 6.0.1 > Version 6.1.0 Pre-Installation Package > Version 6.1.0

Sensor: 5.4.1.10 > Version 6.0.0 Pre-Installation Package > Version 6.0.0 > Version 6.0.1 Preinstall > Version 6.0.1 > Version 6.1.0 Pre-Installation Package > Version 6.1.0

1. To check FMC and sensor at webgui is :

system > update > product update ==> FMC
Device > Device management ==> Sensor version

Is this correct ? how to check version at CLI.

2. How many hour to upgrade phase 1 and phase 2 if we already upload the software ?

3. Any issue on my plan ?

Thank you

Re: Upgrade sensorr and FMC

Marvin Rhoads — Sun, 15 Jul 2018 05:52:06 GMT

You didn't mention your ASA model or software version. Time to upgrade depends on the model and you need to verify version compatibility with your Firepower service module software release.

Reimaging is much much easier that going through the sequential upgrades on the module.

Once you get everything on 6.1 you should proceed to do the additional upgrades to the current 6.2.3 release.

Re: Upgrade sensorr and FMC

sahrizal123 — Sun, 15 Jul 2018 12:22:54 GMT

Hi,

My device as below.

ASA 5516x
Firmware : 9.6.4(3)
ASDM : 7.9 (1 )

Re: Upgrade sensorr and FMC

Marvin Rhoads — Sun, 15 Jul 2018 13:43:53 GMT

OK - you are good compatibility-wise with that ASA version. FYI, the compatibility list is found here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html#id_60529

Regarding time to upgrade, you can expect approximately 90 minutes per upgrade (excluding the pre-installation ones which are a good bit less). That's why we usually recommend reimaging if you are more than 2-3 versions out of date. The time to do multiple upgrades can mean you are taking a whole day just to upgrade one module.