Firepower Sensor Upgrade from FMC

[InTheJuniverse]

Hello

Current SFR version on ASA is : 6.2.2-81

Our FMC version is : 6.2.3.5

I am trying to push Sensor update (6.2.3.5-52) from FMC to ASA Firepower Sensor, it says

"No valid appliances available for Cisco Network Sensor Patch 6.2.3.5-52

This update is intended for software versions greater than or equal to 6.2.3 and less than 6.2.3.5-52"

I am assuming upgrade path issue. What is the way forward? I don't want to perform upgrade manually.

[Marvin Rhoads]

FMC won't automatically pull the prerequisite 6.2.3.0 update via the "Download Updates" button under System > Updates (or via scheduled task for the same).

For minor (and major) upgrades like that you must first download them on your local PC and then upload them to your FMC using the "Upload Updates" button under System > Updates.

Then you can install 6.2.3.0 from the GUI and follow up with the 6.2.3.5 patch.

You might consider first updating your FMC to the current 6.2.3.10 and then patching your sensor to that release.

[InTheJuniverse]

Thanks Marvin.

Two questions

1) How do I know prerequisite for a version? I read this and didn't find anything related to prerequisite

2) Where do I download 6.2.3.0 ?  I see nothing here, though there is

[Marvin Rhoads · Accepted solution]

@InTheJuniverse 

1. In the patch release notes you will see the prerequisite for upgrade to the patch levels. For instance:

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/623x/relnotes/Firepower_Release_Notes_623x/upgrade_procedures.html#id_62351

2. By 6.2.3.0 I should have said 6.2.3 (i.e. unpatched 6.2.3). The necessary upgrade file is "Cisco_Network_Sensor_Upgrade-6.2.3-83.sh.REL.tar" from the page you linked.

[InTheJuniverse]

Interestingly, I uploaded the file 'successfully' but I can't see it under updates!!!

[Marvin Rhoads]

I haven't come across that problem in the dozen or so FMCs I've worked with.

[InTheJuniverse · Accepted solution]

I figured out the problem. I downloaded same file twice, the second file's name obviously was appended with a (1) , this is the one I uploaded without renaming.

I deleted the file from /var/sf/updates and reuploaded and it worked like charm!!!!

Thanks again.

[sureshvn1981@gmail.com]

Hi Marvin,

i am getting same error to perform the ASA5508 .

Please let me know to get the unpatched file  "Cisco_Network_Sensor_Upgrade-6.2.3-83.sh.REL.tar" 

unable to find the file on download link

https://software.cisco.com/download/home/286285773/type/286306337/release/6.2.2

[Marvin Rhoads]

Suresh,

The unpatched file can be found further don on the same page:

https://software.cisco.com/download/home/286285773/type/286306337/release/6.2.3