Upgrading FMC to 6.3.0 version on VMware

[vikrammurudkar7589]

Hi,

We're planning to upgrade FMC to version 6.3.0.

Below is the status of the current devices which we've:

ASA-5506x, FMC has been given 4GB RAM for the previous iOS version on the VMware. So, can we upgrade the FMC version to 6.3.0 with 4GB RAM on VMware?

[balaji.bandi]

Look a FMC 6.3 VM requirement :

https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fmcv/fpmc-virtual/fpmc-virtual-vmware.html

[Mohammed al Baqari]

Hi,

Technically speaking yes you can. This is doable for labing purpose.
Production, this is not usable. FMC is very resource intensive and it is
not workable with 4G. The minimum is 28 GB. Also, the best practice for
virtual FMC is not more than 15 devices.


***** please remember to rate useful posts

[vikrammurudkar7589]

Hi,

Thanks for the reply.

Just last week we upgraded the FMC to 6.4.0-11 version with 8GB RAM which is also on the VMware. And, that FMC is also working in production currently. We didn't faced any issues while doing it.

We were going for 6.6.1 version but since it required 28GB(32GB recommended) RAM we had to downgrade to 6.4.0-11 version.

So, I would like to know whether 4GB RAM is sufficient enough for 6.3.0 version until we increase the RAM for the FMC on VMware?

[balaji.bandi]

As we mentioned and we advise what is recommended for best in production for better outcome.

If it working for you with less 4GB RAM, you can make decision to upgrade, if you come across any isssue raise an TAC case, they will look for the basic requirement before they take case to reviiew.

[Marius Gunnerud]

You will be able to upgrade, but you will have performance issues and if you need to raise a TAC case you will need to bring your installation to the recommended requirements before TAC will look further at your issue (most likely).

Upgrade using not recommended  resources at your own risk.

[Marius Gunnerud]

In addition to what has already been mentioned, the resources on the FMCv should be reserved so that no other guest device can use those resources, otherwise you can run into performance issues.  You might want to consider using FDM for management or cloud based Cisco Defense Orchestrator (CDO) for management of the FTD if you are unable to provide the required resources for FMC.