topic Re: FTD 1010 Upgrade without FMC in Network Security

FTD 1010 Upgrade without FMC

jonahrodriguez — Wed, 15 May 2024 02:53:18 GMT

Hi everyone,
I have a 1010 firewall that was registered with an FMC and when I rebooted the device it hit a bug CSCvy63464.
So now it is not synced with the FMC, per Cisco TAC I need to upgrade.

My question for anyone out there is, what is the best process to upgrade this FTD without the FMC?
Will it lose its configuration?

Thank you in advance any information that can be shared!

Re: FTD 1010 Upgrade without FMC

balaji.bandi — Wed, 15 May 2024 07:00:37 GMT

TAC should able to advise the steps too how to upgrade :

below guide help for you using cli : ( again make sure FMC also need to upgraded to latest version)

https://nefkens.net/upgrading-firepower1010/

Note : always take backup of FMC and FTD before upgrade taking place. and read the release notes before upgrading.

Re: FTD 1010 Upgrade without FMC

Marvin Rhoads — Wed, 15 May 2024 14:01:00 GMT

Fix the synchronization to FMC first. Otherwise you risk losing the device's configuration if you try an upgrade from the cli and then later try to resync to FMC.

Re: FTD 1010 Upgrade without FMC

jonahrodriguez — Wed, 15 May 2024 14:16:23 GMT

Thanks everyone for the replies. I worked with TAC to try and get a workaround in place with no success. So now they are telling me I have no choice but to upgrade to get around the bug. Still waiting on a reply from TAC to see which is the recommended way to go about upgrading the FTD since it no longer syncs with the FMC.

I'm thinking I may have to wipe the device, reimage it, and then reregister with the FMC and push the policies again.

Re: FTD 1010 Upgrade without FMC

Marvin Rhoads — Wed, 15 May 2024 16:02:20 GMT

Can't you drop into expert mode on the 1010 and set the clock to a correct date and time?

Re: FTD 1010 Upgrade without FMC

jonahrodriguez — Thu, 16 May 2024 22:30:59 GMT

TAC tried that and it still didn't fix the issue. They also ran a script and no dice. I had to reimage the firewall and added back to the FMC. Luckily the FMC still had all the Polices and I just needed to reconfigure everything under Device Management. So it wasn't too bad.