Anyconnect VPN Authentication & FMC upgrade

[keithcclark71]

I setup FMC 6.6.5 because it still supported the user authentication agent. I am now considering upgrading my FMC to get up to 7.2 mainly because I read in version 7 one can do local authentication for VPN. I guess i'd lose the identity mapping for usernames to IP addresses in the logs here but for the deployment I am doing it's not a show stopper. That being said can I actually upgrade off 6.6.5 to 7 or do I have to start over?  

[Rob Ingram]

@keithcclark71 yes you can upgrade 6.6.5 direct to 7.2. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/upgrade/management-center/720/upgrade-management-center-72/upgrade-mgmt-center.html#Cisco_Reference.dita_6dfdea5e-5e0d-4430-9909-27054c6e8267

Assuming you are using a hardware appliance, what hardware model do you have? You need to ensure that your hardware supports 7.2, refer to table 1 in the document above.

[keithcclark71]

Hey Rob I'm not using Hardware I have FMCv . The deployment is pretty light i'd say , I am just using 4 Mesh connected FTD 1010's with FMC virtual running on server with 40Gig memory and mirrored 1TB disks, I have backed up everything etc and may try to do this in the afternoon here. I guess nothing ventured nothing gained.

[Rob Ingram · Accepted solution]

@keithcclark71 ok, resources are above the recommended so you should be ok.https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fmcv/fpmc-virtual/fpmc-virtual-vmware.html

If you follow the procedure already provided it should be ok, good luck.