FMC Upgrade in HA

[fatalXerror]

Hi guys,

I am planning to upgrade my FMC which is deployed in HA mode. Just thought because based on the process, I need to pause the sync of 2 FMC, do I need to upload the upgrade image to both FMC nodes or uploading in the Active FMC before pausing sync will do?

Thanks

[balaji.bandi]

First what version of FMC you upgrading, check the upgrade path

and follow below guide and it worked exactly as mentioned to me

https://www.cisco.com/c/en/us/td/docs/security/firepower/upgrade/fpmc-upgrade-guide/upgrade_firepower_management_centers.html#id_54076

BB

[fatalXerror]

Hi balaji,

Yes I am following that document but it doesn't state if do I need also to upload the image to the secondary FMC. It doesn't also state that the image will also synchronize from primary to secondary FMC when you upload it in the primary.

I am upgrading from 6.1 to 6.2.3.

Thanks

[Ashork]

1. Break the HA.

2. Upload the file to both primary and secondary FMC's.

3. Upgrade the secondary FMC.

4.Upgrade the primary

 ---deploy changes to all sensors

** make HA pair (verify both FMC version's should match)

5. Upload the images for sensors and push these to sensors.

6. select the secondary sensors(if they are in HA pair) and upgrade these first.

--deploy changes to listed sensors

7. verify the secondary sensors (check the version)

---deploy changes to all primary.

8. if everything is good then upgrade the primary.

9. check the device health status(up or down).