topic Re: Firepower 1140 Upgrade Path 7.4.2 question in Network Security

Firepower 1140 Upgrade Path 7.4.2 question

kvsachsen — Mon, 24 Mar 2025 14:54:25 GMT

Hello,

we would like to upgrade our cisco Firepower HA Cluster (FDM) from version 7.2.9-44 to 7.4.2.2-28

I look for the upgrade versions and i see the main upgrade file: Cisco_FTD_SSP_FP1K_Upgrade-7.4.2-172.sh.REL.tar

Do i need all the Patches and Hotfix to go to the latest version 7.4.2.2-28 (4 files)? Or do need only the main upgrade file and the latest patch (2 files)?

Thanks for any help and answer!

Best regards

Robert

Re: Firepower 1140 Upgrade Path 7.4.2 question

Sheraz.Salim — Mon, 24 Mar 2025 16:01:29 GMT

Cisco FDM allows direct upgrades between major/maintenance versions without intermediate steps. Since your current version (7.2.9-44) is newer than the minimum required version for 7.4.x (7.0.0), you can upgrade directly to 7.4.2 using the main file.

Looping in @Marvin Rhoads for his expert view.

have a look at this document https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/740/threat-defense-release-notes-74.html#r_uprgade-guidelines-ftd-fdm

Re: Firepower 1140 Upgrade Path 7.4.2 question

Marvin Rhoads — Mon, 24 Mar 2025 16:38:13 GMT

You can go to 7.4.2 (minor release) in your first step and then to 7.4.2.2 (patch release) in the second step.

Patches must be installed on top of the related minor release.