topic Re: What is the most stable FMC version? in Network Security

What is the most stable FMC version?

romero_enrico — Sat, 06 Aug 2016 06:46:47 GMT

Hi Team,

I just want to know what is the most stable FMC version available in the Cisco Site.

This is for ASA5545 model. I currently have 5.4.1-211 on my SFR module and 5.4.1.1-33 on my FMC.

Thanks in advance!

Kind regards,

Enrico

Re: What is the most stable FMC version?

sebrjohnson — Wed, 07 Sep 2016 16:01:21 GMT

Enrico,

If you subscribe to the Cisco Security Advisories, it will tell you that FMC 5.4.0 has a critical vulnerability of Remote command execution. I am not sure if 5.4.1 is affected by this as well. But I am running the 6.0 version. I know there was a new release of 6.1 that just was released at the end of August.

I recommend paying attention to the vulnerabilities for your running software and make the determination to upgrade based on production opportunity.

Respectfully,

Semaj

Re: What is the most stable FMC version?

jaime.pedraza — Wed, 21 Sep 2016 17:56:50 GMT

Stability many times depends on the particular configuration you have. In my experience, 5.4 is a stable version but as Semaj already commented, with some security issues. I am testing the 6.1 with a 5525+FP, and so far, the FMC has been much stable and consistent showing the logs and dealing with tasks. I like the improvements and it is not difficult to get used to the new location of some things (tasks status for example). I think is a good upgrade, but don´t forget to verify the compatibility matrix before upgrading.