Cisco Firepower 2100 with Virtual ASA Upgrade... upgrade advise

[RG78874]

Hi,

I wanted to check what the upgrade path for my Firepower 2100 with Virtual ASA, I've taken a look at the downloads but I'm not sure which package to download?

Current Version and last update was is 9.14.2(13). File name "cisco-asa-fp2k.9.14.2.13.SPA".

I have found this package that I believe is the next update, but as mentioned I'm not to sure;

Cisco Adaptive Security Appliance CSP package for the Cisco Firepower Series.

cisco-asa-fp2k.9.14.2.15.SPA

Thank you.

[Rob Ingram · Accepted solution]

@RG78874 you cannot install Virtual ASA on the hardware appliance, Virtual ASA is for Vmware, Hyper-V etc not physical firepower hardware.

ASA version 9.14.3 is the current cisco gold star recommended version, for the FPR2100 series hardware, not 9.14.2.

https://software.cisco.com/download/home/286312080/type/280775065/release/9.14.3%20Interim

[RG78874]

Hi thanks @Rob Ingram so reading the release notes, this would be a straight upgrade from my current version 9.14.2(13) to 9.14.3?

[Marius Gunnerud]

Going to a new maintenance release within a minor release is considered, for myself at least, a very low risk upgrade. Very straight forward. 

[RG78874]

@Marius GunnerudThat didn't make sense to me in your last response.

I am trying to keep my device up to date as much as possible because I have spontaneous reboots on my firepower, and I do not know what causes this, it randomly happens and it is not a power issue.

[Marius Gunnerud]

I am not sure what is not clear with my previous post. You asked If this is s straight upgrade and i commented on the risk involver with doing an upgrade to a maintenance release. 9.14.3 - 9 is the major release 14 is the minor release and 3 is the maintenance release.  Staying within 9.14 I would consider to be very low risk

[Marius Gunnerud]

For the upgrade path always check the release notes for the version you are going to.  You will find what requirements you need to meet in order to upgrade to that version as well as any bugs that might affect the upgrade.  You might already meet these requirements but good to make it a habit of reading the release notes.

https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/release/notes/asarn914.html

For instructions on upgrading the ASA on FTD2100:

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html