topic Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7 in Network Security

Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

amralrazzaz — Mon, 30 Oct 2023 21:26:24 GMT

I have Firewall model Cisco ASA5516-X Threat Defense with IOS software version 6.6.5.1-15 and ill do upgrade to IOS version Cisco_FTD_Upgrade-7.0.1-84.sh.REL.tar so i need help to get the correct steps to follow in sequence and also my question about upgrading from V6 to V7 what are the impact ill face ?

will setting and current configurations be lost during the upgrade ? if yes , then what shall i do ! if i took back from v6 shall it be worked after upgrade to restore the configurations or i have to reconfigure it from scratch !?

will Smart net and base license will lost during the upgrade!?

Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

Marvin Rhoads — Tue, 31 Oct 2023 03:48:43 GMT

Follow the guide that is included in the release notes:

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/relnotes/firepower-release-notes-700/upgrade.html#Cisco_Generic_Topic.dita_f5e65f64-d2ac-4a1f-bdc5-4bd93d5d6def

There's no reason to go to 7.0.1 unless you want to exactly match some other device for testing reasons. The suggested release would currently be 7.0.6.

All of your current settings and configurations should be preserved across the upgrade.

Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

amralrazzaz — Tue, 31 Oct 2023 07:54:52 GMT

My device managed via FDM not FMC so is it okay to start the upgrading from GUI directly & for the configurations i wish it will keep remain otherwise i have to reconfigure it from scratch because i think the backup taken from version 6 not compatible to be restored on version 7 !

Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

Marvin Rhoads — Tue, 31 Oct 2023 12:22:49 GMT

Yes, see Table 4 in the link I shared - it specifically covers FDM-managed devices.

You are correct that a version 6 backup must be restored on a version 6 device. In the event of a catastrophic failure, you could reimage to version 6 and then restore. But that's quite unlikely.

Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

Marius Gunnerud — Tue, 31 Oct 2023 12:44:45 GMT

Just to add to what @Marvin Rhoads has already mentioned, it is always a very good idea to read the release notes before upgrading. Not only does it provide information on upgrade paths and procedures, it also provides information on bugs and other changes to the software that might affect you.

That being said, I have done many upgrades from 6.6.5 to 7.0 + and have never experiences any issues during the actual upgrade. I have, however, hit a few bugs after the upgrade and the FTD has been running the code for a little while.

Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

amralrazzaz — Wed, 01 Nov 2023 09:34:19 GMT

Thanks for your reply dear and just to confirm the below :

1- ill go directly for upgrade from 6 to 7 using GUI from website or better connect device back 2 back with FW it self ?

2-after upgrade ill lost configurations and will lost also smartnet licenses! am i right ? in that case i have to reconfigure fw from scratch because cannot restore the backup from 6 to 7 ! also i have to restore the smartnet license!

Thanks again for support and if u have nice youtube video about steps would be great !

Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

Marvin Rhoads — Wed, 01 Nov 2023 13:30:04 GMT

1. For FDM-managed devices, you upload the upgrade file to FDM and then select "upgrade". It's all done within the GUI.

2. Backup is recommended but not required. It is only needed for recovery in the event of a failure. Upgrading via the FDM GUI does not cause any loss of configuration nor does it require license re-registration.

Re: Steps and impacts during ASA FTD 5516 UPGRADING FROM v6 to v7

amralrazzaz — Thu, 02 Nov 2023 11:48:02 GMT

i tried twice time to upgrade the asa but still not effected , and current version the same on 6.6.5.1-15 and not upgraded to Cisco_FTD_Upgrade-7.0.1-84.sh.REL.tar and i have check the upgrading progress via ssh using show upgrade status and output as below but seems

not completed !

> show upgrade status
Upgrade from 6.6.5.1 to 7.0.1 in progress (22% progress, time remaining 31 mins)

Started: Thu Nov 02 09:45:31 UTC 2023