Cisco ASA firepower sensor software upgrade

[sankardevarajan1986]

need to upgrade your Firepower Sensor software to version 6.0+ to support DNS and URL Security Intelligence

current version 5.4.1

Anyone support this much appreciated Thanks..! 

[Hkuespert]

You'll need to step through the upgrade.

For the manager:

https://www.cisco.com/c/en/us/td/docs/security/firepower/upgrade/fpmc-upgrade-guide/upgrade_firepower_management_centers.html#id_58959

For the sensor:

https://www.cisco.com/c/en/us/td/docs/security/firepower/upgrade/fpmc-upgrade-guide/upgrade_asa_firepower.html#id_59002

You'll want to upgrade the module after the manager at each step.  Make sure you take backups after every upgrade in case you need to restore.

[sankardevarajan1986]

Thank you. Please find the attachment i have installed version 5.4.1 but there is mentioned four different packages. 

clarify with that i need to install all or only for Network sensor upgrade file?

[Hkuespert]

You'll need to upgrade to 6.0 first.

Grab the 6.0 pre-upgrade file from the software site:

Module: Cisco_Network_Sensor_6.0.0_Pre-install-5.4.0.999-2.sh

https://software.cisco.com/download/home/286271170/type/286277393/release/6.0.0

FPM: Sourcefire_3D_DefenseCenter_S3_6.0.0_Pre-install-5.4.1.999-21.sh

https://software.cisco.com/download/home/286259687/type/286271056/release/6.0.0.0

You'll need to have a current SmartNet contract and entitlement to download these items.  From there you can proceed with the upgrade based on the tables in the first post.

[GRANT3779]

From past experience and doing this many times I would recommend uninstalling the current software version of the sensor and reinstall a new preferred up to date image.

There is a how to here -

https://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/118644-configure-firepower-00.html

If this sensor is managed by an FMC you need to ensure the FMC version is equal to or above the sensor version you are upgrading to. You won't be able to manage a sensor that has a higher software version than FMC.

I would also disassociate the sensor with the FMC before carrying out the reinstall.

Of course you can go through the upgrade path if you wish also..