https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467539#M1083732 <P>There is no affect to the managed devices from the upgrade of FMC, FTDs will continue to process traffic, this can be done during production hours, the only downside is that user to IP mapping will not work, logs from FTD to FMC will not flow and will be stored on the FTD device, once the tunnel is re-established post upgrade the logs will be moved to FMC.</P> <P>&nbsp;</P> <P>Regards,</P> <P>Chakshu</P> <P>&nbsp;</P> <P><EM>Do rate helpful posts!</EM></P> Thu, 16 Sep 2021 09:06:44 GMT Chakshu Piplani 2021-09-16T09:06:44Z https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467533#M1083728 <P>I need to upgrade my fmc from 6.4 to 6.6.4 , can i do it during production? will the upgrade affect the managed devices operation or configuration?</P> Thu, 16 Sep 2021 08:58:05 GMT https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467533#M1083728 baselzind 2021-09-16T08:58:05Z https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467537#M1083730 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/313334">@baselzind</a> you can do it during production if you wish. The FTDs will continue to function, you will be unable to make changes to the FTDs and no logs will be received by the FMC whilst it's being upgraded. If you only have 1 FMC and you are using AMP, you will be unable to perform any cloud lookups.</P> Thu, 16 Sep 2021 09:04:33 GMT https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467537#M1083730 Rob Ingram 2021-09-16T09:04:33Z https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467538#M1083731 <P>Are you upgrade just your FMC or also the FTDs?</P> <P>If it is just the FMC, this can be done in production.&nbsp; The only thing that will be affected is the ability to perform changes, but traffic goes through the FTDs so this will be fine.</P> <P>If you are also upgrading FTDs, and even if they are in HA setup, I would strongly suggest doing this in a service window.&nbsp; I have seen some issues with upgrading FXOS when going from 6.4 to 6.6.&nbsp; So depending on if these are FTD4000 series or FTD 2000 make sure you perform the FXOS manual checks after upgrading the first FXOS before upgrading the second on FTD4000.&nbsp; The FTD software upgrade will be successful but since FXOS is offline traffic will not flow until this is corrected.</P> <P>Upgrading FTD2000 there were no issues with FXOS but version 6.6.1 has an SNMP bug which caused traffic drops (for me at least).&nbsp; But you should be going to a newer release than 6.6.1 so you should not hit this issue.</P> Thu, 16 Sep 2021 09:06:15 GMT https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467538#M1083731 Marius Gunnerud 2021-09-16T09:06:15Z https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467539#M1083732 <P>There is no affect to the managed devices from the upgrade of FMC, FTDs will continue to process traffic, this can be done during production hours, the only downside is that user to IP mapping will not work, logs from FTD to FMC will not flow and will be stored on the FTD device, once the tunnel is re-established post upgrade the logs will be moved to FMC.</P> <P>&nbsp;</P> <P>Regards,</P> <P>Chakshu</P> <P>&nbsp;</P> <P><EM>Do rate helpful posts!</EM></P> Thu, 16 Sep 2021 09:06:44 GMT https://community.cisco.com/t5/network-security/fmc-upgrade-effect-on-the-managed-devices/m-p/4467539#M1083732 Chakshu Piplani 2021-09-16T09:06:44Z