Upgrade sensorr and FMC

[sahrizal123]

Hi,

I plan to upgrade sensor as below ( no downtime as current only monitor mode )

not comfortable to reimage.

Current version

FMC -  5.4.1.6
sensor fw01 -  5.4.1
sensor fw02 - 5.4.1.5

phase 1

FMC : 5.4.1.6 > 5.4.1.10 

Sensor: 5.4.1.0 > 5.4.1.5 > 5.4.1.10 

phase 2

FMC : 5.4.1.10 > Version 6.0.0 Pre-Installation Package > Version 6.0.0 > Version 6.0.1 Preinstall > Version 6.0.1 > Version 6.1.0 Pre-Installation Package > Version 6.1.0 

Sensor: 5.4.1.10 > Version 6.0.0 Pre-Installation Package > Version 6.0.0 > Version 6.0.1 Preinstall > Version 6.0.1 > Version 6.1.0 Pre-Installation Package > Version 6.1.0 

1. To check FMC and sensor at webgui is :

system > update > product update ==> FMC
Device > Device management ==> Sensor version

Is this correct ? how to check version at CLI.

2. How many hour to upgrade phase 1 and phase 2 if we already upload the software ?

3. Any issue on my plan ?

Thank you

[Marvin Rhoads]

You didn't mention your ASA model or software version. Time to upgrade depends on the model and you need to verify version compatibility with your Firepower service module software release.

Reimaging is much much easier that going through the sequential upgrades on the module. 

Once you get everything on 6.1 you should proceed to do the additional upgrades to the current 6.2.3 release.

[sahrizal123]

Hi,

My device as below.

ASA 5516x
Firmware : 9.6.4(3)
ASDM : 7.9 (1 )

[Marvin Rhoads]

OK - you are good compatibility-wise with that ASA version. FYI, the compatibility list is found here:

https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html#id_60529

Regarding time to upgrade, you can expect approximately 90 minutes per upgrade (excluding the pre-installation ones which are a good bit less). That's why we usually recommend reimaging if you are more than 2-3 versions out of date. The time to do multiple upgrades can mean you are taking a whole day just to upgrade one module.