Upgrading DC from 5.3.02 to 5.4

[mahesh18]

Hi everyone,

I need to upgrade the DC and sensors to 5.4.

Can i upgrade directly from 5.3.02 to 5.4?

Regards

Mahesh

[Marvin Rhoads · Accepted solution]

Mahesh,

To update to Version 5.4, a Defense Center must be running at least Version 5.3.1.

Once you move to 5.3.1 you can then go to 5.4 using the upgrade package (filename "Sourcefire_3D_Defense_Center_S3_Upgrade-5.4.0-763.sh").

You should then update it further to the latest point release and patch level (currently 5.4.1.2-38 using filename "Sourcefire_3D_Defense_Center_S3_Patch-5.4.1.2-38.sh")

[mahesh18]

I was able to upgrade to 5.40 but that took more than 6 hours.

Regards

MAhesh

[Marvin Rhoads · Accepted solution]

Yes - FireSIGHT upgrades are very slow.

There are a lot of database objects in the background that are being updated. Generally speaking products that have database underpinnings are much slower to upgrade.

[mahesh18]

I agree assume sensors should take less time as they have no database?

[Daniel Sandstrom]

Generally, for smaller increments in version upgrades are faster. And Yes - Firesight is really slow to upgrade, especially going from 5.3.x to 5.4.x  .. faster upgrading from 5.4.x to a newer 5.4.x though.

The modules are quite consistent in upgrade times from 5.4.x release notes :

Cisco ASA with FirePOWER Services on ASA5512-X, ASA5515-X, ASA5525-X, ASA5545-X, ASA5555-X, ASA5585-X-SSP-10, ASA5585-X-SSP-20, ASA5585-X-SSP-40, and the ASA5585-X-SSP-60 :

46 minutes

Cisco ASA with FirePOWER Services on ASA5506-X, ASA5506W-X, ASA5506H-X, ASA5508-X, and ASA5516-X  :

116 minutes