FPR2120 code upgrade from 9.14 to 9.20

[jr2020]

Dear Team,

Good Day.

Appreciate it if anyone can review this task and share the suggestion on if this would a smooth upgrade..

Task: ASA Code Upgrade
Hardware: Cisco FPR 2130 in Platform mode
Current OS: ASA OS 9.14(3)18
Future OS: ASA OS 9.20.2.2.

Thanks

[balaji.bandi]

First i would check the compatible list  - ASA and ASDM.

9.20(1) is only supported on the Secure Firewall 4200. Later releases are supported on the other models

https://www.cisco.com/c/en/us/td/docs/security/asa/asa920/release/notes/asarn920.html

Plan upgrade : (9.14 you can directly upgrade to 9.20)

https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html

[jr2020]

Thanks Balaji for the update.

This device is now running on Platform mode. Hope the upgrade planned would be compatible for Platform mode.

Thanks again.

[Aref Alsouqi]

Personally I wouldn't recommend to go with the 9.20.x release unless it is recommended by TAC because as of today the latest recommended for the Firepower 2130 ASA code is 9.18.3.

However, if you still want to go with the upgrade then I would suggest keeping the boot system variables of the old and the new images to allow the ASA to automatically revert back to the old release in case of any issue with the new one.

boot system disk0:/< new image >

boot system disk0:/< current image >

Once the upgrade is completed and you are happy with all the testing, you can go ahead and remove the boot system variable of the old image.

[tvotna]

Just wondering how you're going to configure "boot system" on Firepower 2100 running in platform mode.

[Aref Alsouqi]

Actually I'd missed that, thanks for pointing that out.