topic Upgrade path for Firepower 2110 in Network Security

Upgrade path for Firepower 2110

GE2 — Thu, 02 May 2024 13:56:42 GMT

We are currently running 7.0.6.2 on the FMC and 7.0.6.2-65 on the Threat Defense units themselves (released 4-16-24). I'd like to continue to upgrade them but it looks like the next "Suggested release" is 7.2.5 released November 2023. Is it going backwards to update to that release? Are there security implications to consider? Do I update to 7.2.5 and then even though it's not a suggested release, go to 7.2.7 (released 4-29-24)?

Sorry if this is a simple question, but the planning stages for the update process is anything but simple on these.

Re: Upgrade path for Firepower 2110

Ken Stieers — Thu, 02 May 2024 14:37:23 GMT

No.. 7.2.x train has more features and is more stable.

You want to get to 7.2.7. There was a zero-day in 7.2.5, and 7.2.6 had boot loop causing bug.

Re: Upgrade path for Firepower 2110

GE2 — Thu, 02 May 2024 14:39:27 GMT

Okay, I will begin the process of upgrading to 7.2.7. Thank you for taking the time to reply!

Re: Upgrade path for Firepower 2110

Marvin Rhoads — Thu, 02 May 2024 15:13:57 GMT

Like @Ken Stieers said, 7.2.7 would be best for now. The gold star "suggested release" will likely move to that version next. BUT it only happens after enough customers in the field make the leap based on informed decision-making since their positive experience (or not) is one of the factors taken into consideration.

As always read the release notes and upgrade guide - Cisco does a great job on developing and publishing those resources.