topic Re: Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise in Network Security

Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

RG78874 — Sat, 06 Nov 2021 17:46:29 GMT

Hi,

I wanted to check what the upgrade path for my Firepower 2100 with Virtual ASA, I've taken a look at the downloads but I'm not sure which package to download?

Current Version and last update was is 9.14.2(13). File name "cisco-asa-fp2k.9.14.2.13.SPA".

I have found this package that I believe is the next update, but as mentioned I'm not to sure;

Cisco Adaptive Security Appliance CSP package for the Cisco Firepower Series.

cisco-asa-fp2k.9.14.2.15.SPA

Thank you.

Re: Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

Rob Ingram — Sat, 06 Nov 2021 18:06:05 GMT

@RG78874 you cannot install Virtual ASA on the hardware appliance, Virtual ASA is for Vmware, Hyper-V etc not physical firepower hardware.

ASA version 9.14.3 is the current cisco gold star recommended version, for the FPR2100 series hardware, not 9.14.2.

https://software.cisco.com/download/home/286312080/type/280775065/release/9.14.3%20Interim

Re: Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

Marius Gunnerud — Sat, 06 Nov 2021 19:10:51 GMT

For the upgrade path always check the release notes for the version you are going to. You will find what requirements you need to meet in order to upgrade to that version as well as any bugs that might affect the upgrade. You might already meet these requirements but good to make it a habit of reading the release notes.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/release/notes/asarn914.html

For instructions on upgrading the ASA on FTD2100:

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html

Re: Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

RG78874 — Sun, 07 Nov 2021 07:38:21 GMT

Hi thanks @Rob Ingram so reading the release notes, this would be a straight upgrade from my current version 9.14.2(13) to 9.14.3?

Re: Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

Marius Gunnerud — Sun, 07 Nov 2021 07:48:30 GMT

Going to a new maintenance release within a minor release is considered, for myself at least, a very low risk upgrade. Very straight forward.

Re: Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

RG78874 — Sun, 07 Nov 2021 07:55:12 GMT

@Marius GunnerudThat didn't make sense to me in your last response.

I am trying to keep my device up to date as much as possible because I have spontaneous reboots on my firepower, and I do not know what causes this, it randomly happens and it is not a power issue.

Re: Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

Marius Gunnerud — Sun, 07 Nov 2021 09:33:05 GMT

I am not sure what is not clear with my previous post. You asked If this is s straight upgrade and i commented on the risk involver with doing an upgrade to a maintenance release. 9.14.3 - 9 is the major release 14 is the minor release and 3 is the maintenance release. Staying within 9.14 I would consider to be very low risk