Recommendations on 6.0.1

[Christopher Bell]

We've been running 6.0.0.1 for a month or so and we've encountered quite a few issues/bugs.  We upgraded to the 6.x train at the suggestion of TAC to fix an issue in 5.4 we were having.  Because of all the bugs we've hit, and the impact of some of them, I'm trying to be a little more selective on upgrades/patches.  Any suggestion on the stability of 6.0.1 for the ASA SFR modules and FMC?  Anybody actually running it yet?

[Marvin Rhoads]

We've done two 6.0.1 production deployments so far with no issues (knock on wood). One of them medium sized and one relatively large (~4000 users on a campus with a 1 Gbps Internet pipe that's running near max).

I also had no issues setting it up in our lab.

I know it went through a pretty extended shakedown with the FTD image early experience beta program that started last fall.

[Christopher Bell]

Thanks Marvin - were these new deployments or upgrades from previous versions? 

[Marvin Rhoads]

Christopher,

The production deployments were greenfield - new FirePOWER instances built from scratch as VMs. Our lab was an upgrade. That's also a VM and has gone from 5.2-5.3-5.4-6.0-6.0.1 over the past several years. It's managing a 5506 and 3D7120.

[Christopher Bell]

Ok, thanks.  I read something on a separate post earlier today about issues with Variable Sets in the new release so I may wait for a minor patch to 6.0.1 before moving to it.

[Jetsy Mathew]

There are several issues that got fixed in the latest releases. Here is the release notes if you would like to refer and it also contains the details of the bugs that got fixed in the release.

http://www.cisco.com/c/en/us/td/docs/security/firepower/601/relnotes/firepower-system-release-notes-version-601.html

Hope this helps.