Cisco ASA - sfr module - FMC

[LovejitSingh130013]

Hello Experts @balaji.bandi  @Rob Ingram 

I have ASA 5508 with sfr module managed by FMC. I have few confusions.

When we update ASA including ASDM image, does it update the sfr as well?

Also, When we upgrade FMC version do we need to update sfr as well ?

Thanks,

LJ

[Rob Ingram · Accepted solution]

@LovejitSingh130013 

No SFR module is a separate upgrade, upgrade packages

https://software.cisco.com/download/home/286285773/type

You don't have to upgrade the SFR module when you upgrade the FMC, I probably would.

Refer to this upgrade guide for more information.

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html

[balaji.bandi · Accepted solution]

No they need to upgrade individually, ASA upgrade seperate and SFR upgrade seperate.

you no need to upgrade SFR, if you upgrading FMC, as long as it compatable

But saying that if you get chance to upgrade please do upgrade SFR too for security fixes

[LovejitSingh130013]

Hello Experts,

If I update Cisco Network Sensor Upgrade from FMC, I believe it will reboot sfr module, is it OK to do in production hours?  I want to make sure it will not reboot or messed ASA traffic/NAT.  

Any suggestions will be appreciated.

Thanks,

Lovejit Singh

[balaji.bandi]

Always upgrade and reboot should be in the maintenance window, give enough time for the device to come back normal.