Update Friepower 7100 Sourcefire 3D Device S3 Patch Uninstaller 5.4.0.1 to 6.0.0

[elmiguelo]

Hi,

Anyone knows how to upgrade a firepower device as a ips sensor whit version 5.4.0.1 to a 6 version?

please helpme thanks

[Marvin Rhoads]

You normally do it from the Firepower Management Center (FMC) that is managing the device.

The FMC must be at or above the target release level of the device so you upgrade FMC first.

In both cases follow the upgrade path specified in the release notes exactly.

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/relnote/firepower-system-release-notes-version-600.html

In your case you need to first go to 5.4.0.2 and the the 6.0 pre-installation package and finally to 6.0.

Don't stop there however - move on to 6.1, then 6.2 and finally the latest 6.2.2. Your 5.4.0.1 system is quite out of date. Don't upgrade FMC to 6.2 until all managed devices are at 6.1 as 6.2+ cannot manage devices earlier than 6.1.

[elmiguelo]

Hi marvin

Thanks for the answer.

let me tell you my context, i bougth a new firepower 7110 to use as my ips sensor, y have a firepower managment center virtual in version 6.2.

the new firepower 7110 comes whit 5.4.0.1 version and wneh i try to associate it to my management center it says that does not support older version.

so, i try to update my firepower 7110 bit i can not beacuse in supoport center there ir no an upgrade for update version 5.4.0.1 to 5.4.0.2 i can not to find it

i was thinking in install a version 6.2 directly from a ISO image.

marvin, what would you recommend me.

thank you so much

[Marvin Rhoads · Accepted solution]

Ah OK - that makes sense.

Yes - as I noted earlier "Don't upgrade FMC to 6.2 until all managed devices are at 6.1 as 6.2+ cannot manage devices earlier than 6.1."

Given that you have an unconfigured 7110 that you need to associate with your FMC 6.2 then yes - you are best off re-imaging the 7110 from the boot menu as described here:

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118308-technote-firesight-00.html#anc10

You would use the 6.2 restore ISO ("Sourcefire_3D_Device_S3-6.2.0-362-Restore.iso") which can be found here:

https://software.cisco.com/download/release.html?mdfid=286261238&softwareid=286271056&release=6.0.1

If your FMC is already at 6.2.2 there is also a restore ISO for that release as well. That would save you a later upgrade of the IPS.