Downgrading Fpr 1120

[shaanthomas70]

All, 

I have just received a Cisco FPR  1120 with FTD. The unit came with software version 6.5 installed. My company wants me to downgrade it to 6.4.0.4. Does anyone have any I instructions on how to downgrade this device. I have not touched a firewall in 10 years. I tried researching for the solution but I got confused. Any help would be greatly appreciated.

[Rob Ingram · Accepted solution]

Hi @shaanthomas70 

If you refer to the section "Reimage the System with a New Software Version" in this guide.

https://www.cisco.com/c/en/us/td/docs/security/firepower/2100/troubleshoot_fxos/b_2100_CLI_Troubleshoot/b_2100_CLI_Troubleshoot_chapter_011.html

HTH

[shaanthomas70]

Rob,

Thanks for your quick reply. I do have one question. Is downgrading from 6.5 to 6.4 considered downgrading to the previous major conversion? I read the Reimage the System with a new software version section. There is a note between the first and second paragraphs. The note states that to downgrade to a previous major version you must have to perform a complete reimage. I think a major version would be from 6 to 5. But I don’t know. I am just asking because I don’t want to make this box a paper weight. Thanks for the help

[Rob Ingram]

6.4 and 6.5 are considered major versions.

Yes, perform a complete re-image. If you read the notes carefully - "This procedure reformats the entire system, erases the images, and returns it to its factory default settings. After performing this procedure, you must download the new software images and reconfigure your system." So make sure you have permission to download the correct software image from the cisco website for your hardware before you format/erase the current image.

[shaanthomas70 · Accepted solution]

Rob,

Thank you for taking the time out to help. I will perform the downgrade tomorrow morning. I will let you know how it goes.

[Marvin Rhoads]

I'd ask why does management want you to move from one out of date version to an even more out date version. The better alternative would be to upgrade.

The current recommended release is 6.6.1. The managing FMC must be at 6.6.1 or higher but it should also be upgraded (and continue to manage any other 6.4.x etc. devices).