Upgrading FXOS firmware on FPR2110- via FDM

[roliveira11]

Hello Cisco Community! - I'm having difficulty finding guidelines or documentation about upgrading the firmware version of a FPR-2110, that is NOT being managed by FMC. The FPR is being managed via FDM. Any assistance or confirmation about upgrading the FXOS without the presence of FMC would be greatly appreciated!

I’ve found a note buried in one of the guidelines that states “an FTD that’s installed in a firepower appliance, cannot be managed by FDM” - https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200886-installing-and-upgrading-firepower-threa.html

not sure if this is applicable to upgrading the FTD, but it's the closest thing I've found, which makes it seem like I cannot upgrade the FTD without FMC.

Firmware version: 6.2.3-83

Thanks in advance!

[Marvin Rhoads]

That example is based on the 4100 series, for which the caveat is true. 4100 series and 9300 series use Firepower Chassis Manager and that is where we upgrade the FXOS. (FDM support will be coming to those in a future release.)

The 2100 series (when running FTD) integrates FXOS with FTD firmware so upgrading the latter always includes the former. So you upgrade via FDM.

https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html#id_60525

https://www.cisco.com/c/en/us/td/docs/security/firepower/compatibility/firepower-compatibility.html#id_67425

[roliveira11]

Thank you for validating that Marvin!! Would you have any links handy for upgrading the 2100 series FTD/FXOS via FDM?!

THanks again!

[Marvin Rhoads · Accepted solution]

You can follow this procedure for upgrading FTD (which includes bundled FXOS) on a Firepower 2100 series appliance:

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/fdm/fptd-fdm-config-guide-640/fptd-fdm-mgmt.html#id_32969

[roliveira11]

Thanks again for the links! I had a feeling I was skimming over the 4-5 steps needed in one of these guides! Can I pull the possible recent release images down from the FPR2110, eliminating the need to download from Cisco's site?

[Marvin Rhoads]

You're welcome.

You need to download from Cisco.