SourceFire Module version 6.0 upgrade questions

[rweir0001]

We just set up SourceFire Module version 5.4.1 on our ASA recently, but want to upgrade to version 6.0. I went through the 6.0 Release Notes for the upgrade which are dated from November 2015, but had a few questions I was hoping someone on here could answer:

- Our FireSIGHT Management Center is a 64-bit virtual appliance. Can we install version 6.0 on a VMWare Virtual appliance running on EXSi 6.0? The release notes only list ESXi 5.1 and ESXi 5.5.

- What files do I use for the update? The Release Notes say to use "SourceFire_3d_Defense_Center_S3_upgrade-6.0.0-1005.sh. My choices on the Cisco Support site are: asasfr-sys-6.0.0-1005.pkg, asasfr-5500x-boot-6.0.0-1005.img, and Cisco_Network_Sensor_Upgrade-6.0.0-1005.sh. I'm assuming that the asasfr-sys-6.0.0-1005.pkg is for the FMC, and the Cisco_Network_Sensor_Upgrade-6.0.0-1005.sh is for the ASAs.Is that correct?

- How long will the update take for both FMC and ASAs? The ASA is a 5516x and the release notes look like they are saying that the update will take around 41 minutes.

[Philip D'Ath]

We are running VMWare ESXi V6 and Firesight V6 with no issues.

41 minutes, hahahaha.  Allow a good two hours.

We did a clean install for Firesight to go to V6, so not sure which files are needed for the upgrade.

[rweir0001]

Thanks, Philip!

[Jetsy Mathew]

Hello Team,

Its better not to go ahead with version 6.0 when its not yet in support. If at all anything goes wrong , you wont be able to get any continued support from Cisco TAC.

Regards

Jetsy

[Marvin Rhoads · Accepted solution]

ESXi 6.0 is not officially supported so your experience may vary. If you get stuck, you risk TAC telling you that you're on your own.

"Cisco_Network_Sensor_Upgrade-6.0.0-1005.sh" is used to upgrade the ASA FirePOWER module from the FirePOWER Manager.

If you were building one from scratch or reimaging then you would use the boot and sys images respectively.

41 minutes for the FMC is about right. As Philip mentioned, 2 hours is a better estimate for the ASA module, especially on a smaller box like the 5516-X.

[rweir0001]

Thanks, Marvin. I think I may hold off on upgrading to the 6.0 module until it, or a higher version, is officially supported by Cisco. I have no real need for it other than it being the latest and greatest, and I don't want to risk getting into a situation where Cisco Support won't help to bail me out.