Update the module SFR 5.4.0 - 764

[h.infotronique1]

Hi everyone,

I want to update my module SFR 5.4.0-764 to sfr 6.0.0-1005 my questions are:

- can i do it from Virtual denfece centre management or i shall do it with ASA CLI and boot from the image?

- if i do the update my licences that i have ""URL filtring and anti-malware"" i'll lose them ? 

Thanks.

[Jetsy Mathew]

Hello Team,

How do you manage your SFR module ?

If you are managing the SFR module via Defence Center (Firesight Management Center) then you can upgrade the module by pushing the update from the Defence Center GUI itself. To know the detailed steps you can refer the release notes.

http://www.cisco.com/c/en/us/td/docs/security/firepower/60/relnote/firepower-system-release-notes-version-600.html

During an upgrade , there wont be any issues happening to the license .

Rate the helpful posts

Regards

Jetsy 

[h.infotronique1]

I use Firesight Management Center VM ( Sourcefire_Defense_Center_Virtual64_VMware-ESXi-5.4.0-763)

can't i update from sfr 5.4.0-764 to sfr 6.0.0-1005 cause i have ASA 5512-X ?:

Applying the Version 6.0 Pre-Installation Package before updating to Version 6.0 is not required if your appliances are running the following versions:

• Firepower Management Centers running Version5.4.1.6 or later
• Series 3 devices running Version 5.4.0.7 or later
• ASA FirePOWER modules (ASA FirePOWER modules (ASA 5512-X, ASA 5515-X, ASA 5525-X, ASA 5545-X, ASA 5555-X, ASA 5585-X-SSP-10, ASA 5585-X-SSP-20, ASA 5585-X-SSP-40, and the ASA 5585-X-SSP-60) running Version 5.4.0.7 or later
• ASA FirePOWER modules (ASA 5506-X, ASA 5506W-X, ASA 5506H-X, ASA 5508-X, and ASA 5516-X) running Version 5.4.1.6 or later

and i have another question :

i have a problem with saturation of the CPU of module SFR (ASA5512x)  in the Firesight Management I see the CPU of module SFR very high it achieve 99,87% in this situation it block all my navigation internet and also the access of the diffrent server i can't do anything.

thank you 

[Marvin Rhoads]

Your FireSIGHT Management Center must first be upgraded. It must be equal to or higher than the version of any managed devices. I would recommend taking it all the way to the current 6.1.0.1 release.

Then you can upgrade your ASA 5516-X FirePOWER Services module. It would be easiest to just reimage it to 6.1.0 and then re-register to FMC and apply the policies (and patch it to 6.1.0.1). Otherwise you need to do multiple sequential upgrades.