Upgrading Cisco Firepower Management Center from 7.0.0 to 7.2.5

[tiwang]

hi out there

I have just upgraded our HA FMC 2600 fro 6.6.5 to 7.0.0 - and had a few problems since the HA part certainly not upgraded as expected. When I had upgraded the standby device from 6.6.5  to 7.0.0 and I got it into sync again it refused to swap roles and become active since they were on different versions. This caused us to break the HA and let the updated - previously standby device - take over the primary role.

Now I want to upgrade it once more from 7.0.0 to 7.2.5 - has anyone done this with success as described in the guides or have you also ran into the problem that it refused to take-over since they were on different versions?

br thomas iwang

[balaji.bandi]

Not that i have encountered any issue upgrading FMC HA using appliance or VM

I have followed always  below guide and works as expected :

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-management-center/220602-upgrade-fmc-in-high-availability.html

Other side i also read release notes and see if anything that effected  environment :

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/release-notes/threat-defense/720/threat-defense-release-notes-72/features.html#c_fmc-new-features-725

[Marvin Rhoads]

My limited experience upgrading HA FMC appliances is that it generally works fine. You do need to be careful to follow the guides (links by @balaji.bandi  already provided) EXACTLY as it is quite particular about that.

I did have one upgrade get stuck; but TAC was able to get it back in line with some cli level scripts.