Field Notice: FN - 72282 - Firepower Software – Firepower Security Appliance Might Reboot Unexpectedly - Software Upgrade Recommended

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
2.0	06-Jun-22	Updated the Products Affected, Problem Description, Background, and Workaround/Solution Sections
1.0	10-Mar-22	Initial Release

Products Affected

Affected OS Type	Affected Software Product	Affected Release	Affected Release Number	Comments
NON-IOS	Firepower Extensible Operating System	2.6	2.6.1.131, 2.6.1.157, 2.6.1.166, 2.6.1.169, 2.6.1.174, 2.6.1.187, 2.6.1.192, 2.6.1.204, 2.6.1.214, 2.6.1.224, 2.6.1.229, 2.6.1.230, 2.6.1.238, 2.6.1.239
NON-IOS	Firepower Extensible Operating System	2.8	2.8.1.105, 2.8.1.125, 2.8.1.139, 2.8.1.143, 2.8.1.152
NON-IOS	Firepower Extensible Operating System	2.9	2.9.1.131, 2.9.1.135, 2.9.1.143
NON-IOS	Adaptive Security Appliance (ASA) Software	9	9.12.2, 9.12.3, 9.14.1, 9.14.2, 9.15.1
NON-IOS	Adaptive Security Appliance (ASA) Software	Interim	9.12.1 Interim, 9.13.1 Interim, 9.15.1 Interim
NON-IOS	Firepower Threat Defense (FTD) Software	6.6	6.6.0, 6.6.0.1, 6.6.1, 6.6.3
NON-IOS	Firepower Threat Defense (FTD) Software	6.7	6.7.0, 6.7.0.1, 6.7.0.2, 6.7.0.3

Defect Information

Defect ID	Headline
CSCvu84127	Firepower may reboot for no apparent reason

Problem Description

The Firepower eXtensible Operating System (FXOS) that operates with the Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software might cause the Firepower security appliance to reboot unexpectedly, which results in a loss of network traffic.

Background

The FXOS software might cause the Firepower security appliance to reboot unexpectedly, which results in a loss of network traffic. This issue affects the Firepower 1000, 2100, 4100, and 9300 Series security appliances that run affected versions of FXOS software.

Problem Symptom

The Firepower security appliance reboots and might result in a loss of network traffic. There are no log or core files created to indicate a reason for the unexpected reboot.

The Firepower appliance will output a message over the console port to indicate the system reboot.

Jun 28 22:50:40 fpr-2100-3 shutdown[431]: shutting down for system reboot
Jun 28 22:50:40 fpr-2100-3 init: Switching to runlevel: 6
Jun 28 22:50:41 fpr-2100-3 SF-IMS[533]: [533] K01sensor:CLI Stop [INFO] Stopping Cisco Firepower 2110 Threat Defense
Jun 28 22:50:41 fpr-2100-3 SF-IMS[8292]: [8292] pm:control [INFO] ControlHandler auditing message->type 0x9013, from '', cmd '/ngfw/usr/local/sf/bin/pmtool Shutdown', pid 534 (uid 0, gid 0)
Jun 28 22:50:41 fpr-2100-3 SF-IMS[8292]: [8292] pm:process [INFO] Begin Process Shutdown

Workaround/Solution

Cisco recommends that the Firepower software be upgraded according to the security appliance platform.

Firepower 4100 and 9300 Series Security Appliances

For the Firepower 4100 and 9300 Series platforms, upgrade to one of the FXOS software versions listed in the table in order to resolve the reboot issue.

Release Version	Fixed Version
FXOS 2.6.x	FXOS 2.6.1.254 or later
FXOS 2.8.x	FXOS 2.8.1.164 or later
FXOS 2.9.x	FXOS 2.9.1.150 or later

 

Firepower 1000 and 2100 Series Security Appliances

For the Firepower 1000 and 2100 Series platforms, the FXOS software is bundled with the FTD and ASA software. Upgrade to one of the FTD or ASA software versions listed in these tables in order to resolve the reboot issue.

Release Version	Fixed Version
FTD 6.6.x	FTD 6.6.4 or later
FTD 6.7.x	FTD 7.0.0 or later

 

Release Version	Fixed Version
ASA 9.12.x	ASA 9.12.4.39 or later
ASA 9.13.x	Migrate to a fixed release
ASA 9.14.x	ASA 9.14.3 or later
ASA 9.15.x	ASA 9.16.1 or later

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email or telephone

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.