topic Re: Cisco ASA firepower sensor software upgrade in Network Security

Cisco ASA firepower sensor software upgrade

sankardevarajan1986 — Tue, 07 May 2019 13:32:37 GMT

need to upgrade your Firepower Sensor software to version 6.0+ to support DNS and URL Security Intelligence

current version 5.4.1

Anyone support this much appreciated Thanks..!

Re: Cisco ASA firepower sensor software upgrade

Hkuespert — Tue, 07 May 2019 14:01:16 GMT

You'll need to step through the upgrade.

For the manager:

https://www.cisco.com/c/en/us/td/docs/security/firepower/upgrade/fpmc-upgrade-guide/upgrade_firepower_management_centers.html#id_58959

For the sensor:

https://www.cisco.com/c/en/us/td/docs/security/firepower/upgrade/fpmc-upgrade-guide/upgrade_asa_firepower.html#id_59002

You'll want to upgrade the module after the manager at each step. Make sure you take backups after every upgrade in case you need to restore.

Re: Cisco ASA firepower sensor software upgrade

sankardevarajan1986 — Tue, 07 May 2019 15:06:45 GMT

Thank you. Please find the attachment i have installed version 5.4.1 but there is mentioned four different packages.

clarify with that i need to install all or only for Network sensor upgrade file?

Re: Cisco ASA firepower sensor software upgrade

GRANT3779 — Tue, 07 May 2019 15:35:09 GMT

From past experience and doing this many times I would recommend uninstalling the current software version of the sensor and reinstall a new preferred up to date image.

There is a how to here -

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

If this sensor is managed by an FMC you need to ensure the FMC version is equal to or above the sensor version you are upgrading to. You won't be able to manage a sensor that has a higher software version than FMC.

I would also disassociate the sensor with the FMC before carrying out the reinstall.

Of course you can go through the upgrade path if you wish also..

Re: Cisco ASA firepower sensor software upgrade

Hkuespert — Tue, 07 May 2019 16:34:25 GMT

You'll need to upgrade to 6.0 first.

Grab the 6.0 pre-upgrade file from the software site:

Module: Cisco_Network_Sensor_6.0.0_Pre-install-5.4.0.999-2.sh

https://software.cisco.com/download/home/286271170/type/286277393/release/6.0.0

FPM: Sourcefire_3D_DefenseCenter_S3_6.0.0_Pre-install-5.4.1.999-21.sh

https://software.cisco.com/download/home/286259687/type/286271056/release/6.0.0.0

You'll need to have a current SmartNet contract and entitlement to download these items. From there you can proceed with the upgrade based on the tables in the first post.