08-24-2017 01:30 PM - edited 02-21-2020 06:14 AM
I have a FMC1500 that manages 6 firepower sensors in my ASA firewalls.
I recently upgraded the FMC to 6.0 and patched it. Now I am trying to upgrade the sensors to 6.0+.
On an ASA running IOS 9.6.3, I tried to install the 6.0.0__Pre-install-5.4.1.999-2 patch and then upgrade to 6.0
However, when I launch the upgrade process from FMC, it doesn't seem to do anything. It says task status updated with upgrade, but if you go into the task menu, nothing is running. I don't see anything in the sensor shell either.
Anyone see this before? What is going on?
Solved! Go to Solution.
08-24-2017 02:02 PM
Hi Colin,
As for FMC you can drop to the shell and and navigate to /var/log/sf. There you will find a directory for your update (e.g. Sourcefire_3D_Defense_Center_S3_Patch-6.1.0.1) which include the status.log.
You can use tail to follow the log output like this
tail -f /var/log/sf/Sourcefire_3D_Defense_Center_S3_Patch-6.1.0.1/status.log
As for your firepower sensor you need to switch to bash shell using the expert command. You can also tail the update logfile located at /var/log/update.status
08-24-2017 01:44 PM
You can verify the upgrade progress in a log file on your sensor. The upgrade status is saved to /var/log/update.status on the sensor.
In case this file is empty you can use pigtail on FMC shell to find out what is happening when you start the upgrade. Just open a root shell on FMC, run pigtail and start the upgrade from the UI.
In case you need further guidelines on how to setup pigtail or need help analyzing the output let me know.
regards
Oliver
08-24-2017 01:53 PM
Apparently it does kick off the process, but it won't show me anything in the task status, so I have no idea what is going on behind the scenes
this is happening when trying to upgrade the FMC as well.
Is there a way to view the upgrade status within the shell/cli ?
08-24-2017 02:02 PM
Hi Colin,
As for FMC you can drop to the shell and and navigate to /var/log/sf. There you will find a directory for your update (e.g. Sourcefire_3D_Defense_Center_S3_Patch-6.1.0.1) which include the status.log.
You can use tail to follow the log output like this
tail -f /var/log/sf/Sourcefire_3D_Defense_Center_S3_Patch-6.1.0.1/status.log
As for your firepower sensor you need to switch to bash shell using the expert command. You can also tail the update logfile located at /var/log/update.status
08-25-2017 06:46 AM
08-24-2017 02:04 PM - edited 08-24-2017 02:05 PM
EDIT: Removed since my reply was posted two times.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide