Рет қаралды 3,775
JPN slide version is here (日本語スライド版) : • 【15分】FTD アップグレード方法 紹介【...
Demonstrate how to upgrade a Firewall Management Center (FMC) managed Cisco Secure Firewall (FTD) and best practices. Solid pre-work helps to upgrade your devices smoothly.
Below is a supplementary explanation of this video.
1. CLI Reasiness Check for ver 6.x FTD-HA
- Access FTD CLI, then issue "expert", "sudo su -" and below command
--------------------------------------------------------
Format
install_update.pl --detach --readiness-check /var/sf/updates/(file name)
Exmaple
install_update.pl --detach --readiness-check /var/sf/updates/Cisco_FTD_Upgrade-7.2.2-54.sh.REL.tar
--------------------------------------------------------
- Result is contained in "main_upgrade_script.log", so please check whether result is "Success", or not.
--------------------------------------------------------
File Path
/ngfw/var/log/sf/(file name)/upgrade_readiness/main_upgrade_script.log
Example
more /ngfw/var/log/sf/Cisco_FTD_Upgrade-7.2.2/upgrade_readiness/main_upgrade_script.log
--------------------------------------------------------
2. How to upgrade FMC HA
- At first, stop FMC sync between FMCs
System -- Integration -- High Availability -- Pause Synchronization
- Upgrade FMC from Standby, then Active
- Restart sync by "Make-Me-Active" button
Detail:
www.cisco.com/...
3. How to upgrade FPR4100/9300
- Before FTD upgrade, FXOS upgrade is needed, which is compatible version
You should check FXOS Compatibility release note, and check compatible recommended version (bold)
www.cisco.com/...
- At first, upgrade FXOS of FTD stanbdy
- Switch FTD active by Devices -- Device Management "Switch Active Peer"
- Upgrade FXOS of new FTD standby (i.e. old FTD active)
- Please check FXOS release note in detais
4. Limitation of FPR1000 series upgrade
- In case of upgrading FPR1000 from 6.4 to 6.5+, manual reload is required
- Please check the below release note in detail
www.cisco.com/...
Referrer ##
Customer Success Specialist, Cisco Systems G.K.
Taisuke Nakamura
- CCIE Security, CCIE Enterprise Infrastructure, CCDP
- Cisco Certified Cyber Security Instructor
- Loves traveling, manga and natto (fermented soybeans). Father of one child.
REFERENCE ##
Secure Firewall Upgrade Best Practice [FTD managed by FMC]
community.cisc...
Cisco Secure Firewall Management Center Device Configuration Guide, Version 7.2
www.cisco.com/...
Cisco Secure Firewall
www.cisco.com/...
#cisco
#ftd
#fmc
#upgrade
#update