12-11-2018 02:12 AM - edited 03-12-2019 07:09 AM
As per title. Firepower 6.3.0 been out for 8 days now. Anybody tried it in production yet?
What's the lowdown on the good, the bad and the ugly?
We have a LARGE customer deployment that we need to upgrade from 6.2.2.X.
We're trying to decide whether to go to 6.2.3.7 or 6.3.0....
Cheers,
Matt.
12-11-2018 02:16 AM
12-11-2018 05:18 AM
No. Wait updates. Have a bugs.
12-11-2018 02:17 AM
Hi 😉
12-11-2018 02:20 AM
Phil - I'm tending to agree with you there!
Abheesh - Nice to see you're using it. Any comments? Our customer has over 100 managed FTDs/FPRs so we don't want to be getting it wrong!
Cheers,
Matt.
12-11-2018 02:21 AM - edited 12-11-2018 02:26 AM
So far no issues reported from customer side, I have upgraded on last Saturday
12-11-2018 02:26 AM
12-11-2018 02:28 AM
01-09-2019 03:03 PM
I too am running 6.3.0-83 (which I upgraded to shortly before the holidays).
Now I see 6.3.0-84 was released, but FMC won't allow the upgrade from 6-3-0-83 to 6.3.0-84 to be applied:
Attempting to run the update creates this error:
But wait, my version is less than 6.3.0-84??
I'm always excited by the new and innovative ways this system continues to frustrate delight me :)
01-09-2019 11:07 PM
If you read the updated release notes of 6.3.0 you will see that build 84 fixes an upgrade bug when the FMC has been installed with a pre 6.0 version. If the upgrade was successful for you, you don't need this build.
12-12-2018 03:01 AM - edited 12-12-2018 03:05 AM
Having problem updating 5508-X Firepower running 6.2.3.7.
FMC has been updated to 6.3.0. "ASA FirePOWER module upgrade from 6.2.2 and above to 6.3.0" update file has been downloaded from Cisco, file name "Cisco_Network_Sensor_Upgrade-6.3.0-83.sh.REL.tar", as no update were found by FMC for managed device during updates check (strange, but possible) .
Once uploaded update being pushed from FMC to sensor, FMC says:
"No valid appliances available for Cisco Network Sensor Upgrade 6.3.0-83
This update is intended for software versions greater than or equal to 6.1.0 and less than 6.3.0-83".
I do have 6.2.3.7 on a sensor, what version does it need for update to run?
How do I update that sensor? Any help will be appreciated!
12-12-2018 03:28 AM
12-12-2018 03:35 AM
Yes, 6.2.3.7 it is.
So it is possible to update Firepower module from within CLI?
Thank you, I'll follow the way you mentioned.
12-13-2018 05:28 AM - edited 12-13-2018 05:29 AM
Well, I managed to upload an update to a sensor via SCP.
And right after "sudo install_update.pl --detach /var/sf/updates/Cisco_Network_Sensor_Upgrade-6.3.0-83.sh" it says:
ARGV[0] = --detach
ARGV[1] = /var/sf/updates/Cisco_Network_Sensor_Upgrade-6.3.0-83.sh install_update.pl begins. bundle_filepath: /var/sf/updates/Cisco_Network_Sensor_Upgrade-6.3.0-83.sh
Update is not a signed or content update at /ngfw/usr/local/sf/bin/install_update.pl line 509.
I can't even speculate as to what that might be.
12-13-2018 06:11 AM
You need to use the tar file for newer versions.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: