Contents

Issue

Users running Secure Firewall Management Center (FMC) version 7.6.5 managing Firewall Threat Defense (FTD) deployments can encounter uncertainty regarding upgrade compatibility when planning to upgrade FMC to version 7.7.x. The specific concern involves maintaining supported management capabilities for Firepower 2100 appliances running FTD version 7.4.x while simultaneously managing newer Secure Firewall 3100 appliances running FTD version 7.6.x.

The primary issue stems from unclear or contradictory information in Cisco's published documentation regarding FMC 7.7.x support for Firepower 2100 appliances, particularly when these devices are running FTD versions 7.4.x. This documentation ambiguity creates hesitation to proceed with FMC upgrades needed to access newer features such as geolocation-based controls for Remote Access VPN access restrictions by country.

Environment

- FMC version 7.6.5, upgraded to 7.7.x.

- Secure Firewall 3100 appliances running FTD version 7.6.x.

- Firepower 2100 appliances running FTD version 7.4.4.

Resolution

FMC version 7.7.x fully supports management of Firepower 2100 appliances running FTD version 7.4.x, including 7.4.4. The upgrade from FMC 7.6.5 to 7.7.x maintains supported management capabilities for all devices in the mixed deployment environment.

Version Compatibility Confirmation

The minimum FTD version that FMC 7.7.x can manage is 7.2.x. Since the Firepower 2100 appliances are running FTD version 7.4.4, they fall within the supported management range for FMC 7.7.x.

Platform-Specific Version Limitations

The Firepower 2100 platform has a maximum supported software version limitation. This platform is capped at the FTD 7.4 major train and cannot be upgraded to FTD versions 7.6, 7.7, or 10.x. This limitation is independent of the FMC version used for management.

In contrast, the Secure Firewall 3100 appliances can continue to run FTD version 7.6.x and can be upgraded to newer FTD releases as they become available and are supported on these platforms.

Documentation References

The official compatibility information can be found in the Cisco documentation:

- Cisco Secure Firewall Management Center Compatibility Guide for device management compatibility matrices.

- Cisco Secure Firewall Threat Defense Compatibility Guide for platform-specific version limitations.

Upgrade Recommendation

The FMC upgrade to version 7.7.x can proceed safely with the current device configuration. The mixed environment continues to function with:

- Firepower 2100 appliances remaining on FTD version 7.4.x (due to platform limitations).

- Secure Firewall 3100 deployments continuing on FTD version 7.6.x or upgraded to newer compatible versions.

- FMC 7.7.x managing all devices within their respective supported version ranges.

Cause

The uncertainty regarding compatibility stems from documentation interpretation challenges when dealing with mixed-platform deployments running different FTD software versions. The Cisco Secure Firewall documentation covers multiple product lines and version combinations, which can create ambiguity when determining specific compatibility matrices for complex deployment scenarios involving legacy and current-generation platforms.

Related Content

- Cisco Secure Firewall Management Center Compatibility Guide

- Cisco Secure Firewall Threat Defense Compatibility Guide

- Cisco Technical Support & Downloads