[Eng CC] FTD Upgrade Demo and Best Practice [FMC managed] [Cisco Secure Firewall]

JPN slide version is here (日本語スライド版) : • 【15分】FTD アップグレード方法 紹介【...
Demonstrate how to upgrade a Firewall Management Center (FMC) managed Cisco Secure Firewall (FTD) and best practices. Solid pre-work helps to upgrade your devices smoothly.

Below is a supplementary explanation of this video.
1. CLI Reasiness Check for ver 6.x FTD-HA
- Access FTD CLI, then issue "expert", "sudo su -" and below command
--------------------------------------------------------
Format
install_update.pl --detach --readiness-check /var/sf/updates/(file name)
Exmaple
install_update.pl --detach --readiness-check /var/sf/updates/Cisco_FTD_Upgrade-7.2.2-54.sh.REL.tar
--------------------------------------------------------
- Result is contained in "main_upgrade_script.log", so please check whether result is "Success", or not.
--------------------------------------------------------
File Path
/ngfw/var/log/sf/(file name)/upgrade_readiness/main_upgrade_script.log
Example
more /ngfw/var/log/sf/Cisco_FTD_Upgrade-7.2.2/upgrade_readiness/main_upgrade_script.log
--------------------------------------------------------
2. How to upgrade FMC HA
- At first, stop FMC sync between FMCs
System -- Integration -- High Availability -- Pause Synchronization
- Upgrade FMC from Standby, then Active
- Restart sync by "Make-Me-Active" button
Detail:
www.cisco.com/...
3. How to upgrade FPR4100/9300
- Before FTD upgrade, FXOS upgrade is needed, which is compatible version
You should check FXOS Compatibility release note, and check compatible recommended version (bold)
www.cisco.com/...
- At first, upgrade FXOS of FTD stanbdy
- Switch FTD active by Devices -- Device Management "Switch Active Peer"
- Upgrade FXOS of new FTD standby (i.e. old FTD active)
- Please check FXOS release note in detais
4. Limitation of FPR1000 series upgrade
- In case of upgrading FPR1000 from 6.4 to 6.5+, manual reload is required
- Please check the below release note in detail
www.cisco.com/...
Referrer ##
Customer Success Specialist, Cisco Systems G.K.
Taisuke Nakamura
- CCIE Security, CCIE Enterprise Infrastructure, CCDP
- Cisco Certified Cyber Security Instructor
- Loves traveling, manga and natto (fermented soybeans). Father of one child.
REFERENCE ##
Secure Firewall Upgrade Best Practice [FTD managed by FMC]
community.cisc...
Cisco Secure Firewall Management Center Device Configuration Guide, Version 7.2
www.cisco.com/...
Cisco Secure Firewall
www.cisco.com/...
#cisco
#ftd
#fmc
#upgrade
#update

[@nenixplayzz4883]

Awesome video. Thanks for sharing. very informative.

[@leotran3184]

Hontoni arigatou, Nakamura Sensei. You are the best! 🙏 WOW! I watch anime everyday and I can't believe that one day I can watch and learn technologies from a Nihonjin with an English translation even tho English is not my mother tongue. I definitely will keep exploring your channel and watch all Videos with [Eng CC]. I hope more people will know about your wonderful work.

[@Cisco-Success-Channel]

Leo san, ureshii post, arigato gozaimasu ! 🙌 It is very encouraging. We would like to create more Eng CC videos ..!

[@lisacoody]

THANK YOU very much for this video (and translating it to English). Your video thoroughly explains the steps necessary to upgrade a Firepower device. I agree with the previous commenter - please upload more!

[@glenespn]

this is 1 of the best guide I have seen on KZbin, thank you for taking the time to put in an English translation. Upload more..

[@jlfranco1]

great video!, well explained, thanks!!, good job!

[@atulpatil5166]

Super explained flow...helps a lot

[@mp-vw5ce]

This was a very thorough explanation and it worked perfectly for our HA firewalls. Thank you and great work!!!!

[@jstinn123]

Excellent content.