12-09-2019 09:15 AM - edited 02-21-2020 09:45 AM
Dear All,
I need to upgrade ASA 5525-9.4 to 9.8
FMC(virtual ) existing version is 5.4.1
SFR existing version is 5.4.0
My first question is ,do I have to check the compatibility with ASA version for SRF? Or since ,SRF totally managed by FMC,I have to check the compatibility only for FMC for SFR .But Need to check the FMC and ASA compatibility.
Please anyone can clear my doubts.
Thank You
12-09-2019 02:21 PM
12-11-2019 01:49 AM
12-09-2019 06:58 PM
While, as @Sheraz.Salim correctly notes, you CAN do this I would recommend that you not do so. If you are running Firepower 5.4.x you are VERY far behind in release levels. You should be running 6.4.0.4 or later on both your FMC and Firepower service modules.
12-11-2019 01:48 AM
Thanks a lot for you all prompt reply.
Could you pls clarify,do I have to check the compatibility mx of SFR and ASA?This is my confusion.
*ASA vs FMC compatibilty need to check
*SFR vs FMC compatibility need to check
*SFR vs ASA no need ,since SFR managed by FMC ?
Pls correct me if I am wrong.
12-11-2019 04:17 AM
You need to verify:
Wherever possible, go with the Cisco-recommended "Gold Star" release (see the respective product download pages) unless there's a compelling reason not to do so.
12-11-2019 04:34 AM - edited 12-11-2019 04:35 AM
*ASA vs FMC compatibilty need to check --- Yes
*SFR vs FMC compatibility need to check --- Yes
*SFR vs ASA no need ,since SFR managed by FMC --Yes.
you this matrix guide. https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html
and plan the downtime accordingly.
12-11-2019 05:46 AM
Thank you for the reply.
In the document you have shared ,says, need to check the ASA and SFR compatibility.
*SFR vs ASA no need ,since SFR managed by FMC --Yes <--No need to check ,correct?
I could not find any document given SFR compatibility with ASA.
12-11-2019 06:20 AM
Newer versions of Firepower service module generally require newer versions of ASA (and ASDM for those not using FMC management).
Here is the document which has a table (Table 11) showing Firepower-ASDM-ASA compatibility:
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide