IMPORT ACCESS CONTROL POLICY NEWER VERSION OF FTD

[hamidreza.taghipur]

hi

i use FTD 4120 now

my FTD version 6.2.3 with FMC 6.4.0.4 . i want upgrade them .i have alot rules in ACP.

if i export of my access control policy can i import in new version ?

before upgrade i checked  it in emulation(EVE) , but i take a error

how can i do it ?

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/213269-upgrade-procedure-through-fmc-for-firepo.html

[hamidreza.taghipur]

thanks for reply
but that is not my problem solution .
my problem is import ACP rules of FTD lower version to higher version .
and how can i do it ?
more explanation :
i have 2 Cluster FTDs , and those dont have any access to internet . and if i want upgrade them offline , i must first upgrade chassis firmware and after them upgrade FTD and FMC ...
i am afraid of my procedure will be failed . for this reson i want take a export of my ACP rules .

[Marius Gunnerud]

I have not upgraded FTD4120 but I have upgraded a lot of FTD4110s and never had any issues with configuration loss.  The steps are as you say, first upgrade FMC to the relevant version, next upgrade FXOS and then upgrade the FTD software.  I have generally upgraded FXOS and then waited a few days to confirm there are no issues with that upgrade before upgrading the FTD software.

But, as with all upgrades you should:

1. Have an up to date backup of your FMC
2. Read through the release notes
3. Perform the upgrade within a service window that will allow for troubleshooting if needed.

[Marvin Rhoads · Accepted solution]

When you upgrade, the policies and associated rules are all preserved.

It's not supported to import an ACP from an older version into a newer version of FMC.

[hamidreza.taghipur]

Thanks alot

[MHM Cisco World]

Keep copy of config.

Not all config is working when upgrade as I know.

Wishing you a good luck