topic Re: Upgrade FTD 2140 via cli in Network Security

Upgrade FTD 2140 via cli

atsukane — Mon, 10 Jun 2024 20:44:32 GMT

Hi All,

We've been seeing mysterious reboots of FPR2140 running 7.2.4, so logged a TAC case.

According to TAC we were hitting the following defects.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwh10681 [bst.cloudapps.cisco.com]
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwi21030 [bst.cloudapps.cisco.com]

So, RMA was issued and we received a replacement.

However, for some reason I couldn't add the new device to FMC, it turns out that the replacement unit which came with 6.4 cannot be supported on FMC running 7.2. 😞

Based off the compatibility matrix the oldest FTD version that FMC 7.2 can support is 6.6.

How do we go about upgrading the FTD in this case, suppose we'd have to use cli/expert mode?

Any assistance is very much appreciated.

Thanks,

Re: Upgrade FTD 2140 via cli

ccieexpert — Mon, 10 Jun 2024 23:41:18 GMT

it may best to reimage the firewall to 7.2

https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.html

you can also use FDM which the onboard local manager and upgrade from that... but it it is time consuming.. reimage the fastest and best. the reimage is much cleaner option rather than upgrades as it involves replacing files etc..

Re: Upgrade FTD 2140 via cli

Marvin Rhoads — Tue, 11 Jun 2024 03:25:02 GMT

Reimage is the best choice with that unit. You could also request the TAC issue a replacement RMA to avoid the hassle for you if you didn't want to reimage. They have the ability to specify the replacement unit run something newer than 6.4 - at least 7.0 or later.

Re: Upgrade FTD 2140 via cli

atsukane — Tue, 11 Jun 2024 07:35:37 GMT

Thank you @ccieexpert and @Marvin Rhoads .

Reimage it is then!

Re: Upgrade FTD 2140 via cli

atsukane — Thu, 20 Jun 2024 08:00:07 GMT

just reporting back to say that reimage has worked, thanks both.

also sharing a link that TAC has shared with us which includes a different way of reimaging.

Cisco FXOS Troubleshooting Guide for the Firepower 1000/2100 and Secure Firewall 3100/4200 with Threat Defense - Reimage Procedures [Cisco Secure Firewall Threat Defense] - Cisco