FTD Ugrade

[N3om]

HI

Bit of a weird question, when I initiate an upgrade of an FTD 2100 from FMC, does the FTD stop forwarding straight away or does it have to get to a point in the upgrade before it stops forwarding our tr

[balaji.bandi]

Depends on FTD setup, if they are in HA then traffic should able to get through on the process.

If the standalone, i would expecte upgrade start to end will not pass any traffic. (better do this upgrade in maintenance window)

Note : take the configuration out of the box, read the release notes, first upgrade FMC before upgrading to FTD by checking the compatable matrix)

[MHM Cisco World]

ypu upgrade you dont know how time it take and what issue you will face' 

It better to do upgrade in window and that time if upgrading stop or not stop forwarding data it dont matter 

MHM

[Marvin Rhoads · Accepted solution]

For a standalone device, there is a point about 30% into the process where the "stop system" script will shutdown dataplane forwarding.

As noted by @balaji.bandi a High Availability (HA) pair upgrade will be zero downtime since the Standby member will upgrade first and, only after it is verified as successful, it then becomes Active and the other member will be upgraded.

If it's in production, a maintenance window should always be planned and approved to manage users' expectations.

[RodneyWilkins11]

When you upgrade the FTD 2100 from FMC, it may keep forwarding traffic until it reaches a specific point in the upgrade process where it needs to pause briefly. Then, it completes the upgrade before it resumes forwarding traffic again.