topic Upgrade FPR 4100 firewall cluster in Network Security

Upgrade FPR 4100 firewall cluster

Maurice Ball — Mon, 21 Feb 2022 13:41:55 GMT

I need to upgrade two Cisco FPR 4110 firewalls that are configured as a cluster. Is the procedure of upgrading the Cisco FPR 4110 firewall cluster different from upgrading two Cisco FPR 4110 firewalls configured as a HA active and standby pair?

Re: Upgrade FPR 4100 firewall cluster

balaji.bandi — Mon, 21 Feb 2022 14:06:23 GMT

high level First you need to check what is currect version and what is target version to upgrade, check the compatability matrix.

1. Upgrade FXOS Underlay version

2. Upgrade FMC

3. Upgrade FTD.

Note : Make sure you take all the backup where required and necessary, out of the box.

There is straght forward upgade, check configuration sync and no pending, make sure updates are upto date.

Re: Upgrade FPR 4100 firewall cluster

Maurice Ball — Mon, 21 Feb 2022 14:20:18 GMT

Thanks for the quick reply. I understand how to upgrade two FPR 4110 nodes with ASA software running on the nodes in standalone mode that is configured as a HA pair. What I need to know is. Is the procedure the same when you upgrade two FPR 4110 nodes configured as a cluster?

Note: The nodes are not using FMC. The upgrade will be performed via FDM.

Re: Upgrade FPR 4100 firewall cluster

balaji.bandi — Mon, 21 Feb 2022 15:49:23 GMT

Not sure or never Tried, using FDM you can make Cluster.

Proceedure is same, FXOS . FTD upgrade process is the same as mentioned, (cluster means, only hardware is cluster)

https://ciscocustomer.lookbookhq.com/ngfwguidedjourney/cisco-firepower-rele-2

https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/ftd-4100-9300-cluster.html