Upgrade FPR 4100 firewall cluster

[Maurice Ball]

I need to upgrade two Cisco FPR 4110 firewalls that are configured as a cluster. Is the procedure of upgrading the Cisco FPR 4110 firewall cluster different from upgrading two Cisco FPR 4110 firewalls configured as a HA active and standby pair?

[balaji.bandi]

high level First you need to check what is currect version and what is target version to upgrade, check the compatability matrix.

1. Upgrade FXOS  Underlay version

2. Upgrade FMC

3. Upgrade FTD.

Note : Make sure you take all the backup where required and necessary, out of the box.

There is straght forward upgade, check configuration sync and no pending, make sure updates are upto date.

[Maurice Ball]

Thanks for the quick reply. I understand how to upgrade two FPR 4110 nodes with ASA software running on the nodes in standalone mode that is configured as a HA pair. What I need to know is. Is the procedure the same when you upgrade two FPR 4110 nodes configured as a cluster?

Note: The nodes are not using FMC. The upgrade will be performed  via FDM. 

[balaji.bandi · Accepted solution]

Not sure or never Tried, using FDM you can make Cluster.

Proceedure is same, FXOS . FTD upgrade process is the same as mentioned, (cluster means, only hardware is cluster)

https://ciscocustomer.lookbookhq.com/ngfwguidedjourney/cisco-firepower-rele-2

https://www.cisco.com/c/en/us/td/docs/security/firepower/fxos/clustering/ftd-4100-9300-cluster.html