Verify FMC Hotfix Installation Status when UI Version Does Not Change

Available Languages

Download Options

  • PDF     (99.0 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (157.6 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (158.1 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:August 4, 2026
Document ID:226216

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Contents

Issue

After successfully installing the Hotfix CY (Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar) on Firewall Management Center (FMC) running version 7.6.5-106, the version number displayed in the User Interface (UI) and the output of the show version command output still shows 7.6.5-106 instead of reflecting the hotfix version. The installation completed without errors, but there is uncertainty about whether the version number must change to reflect the hotfix installation.

FMC UI version

> show version
-------------------[ FMC1600-4 ]--------------------
Model                     : Cisco Secure Firewall Management Center 1600 (66) Version 7.6.5 (Build 106)
UUID                      : 12345678-1234-1234-1234-1234567890
Rules update version      : 2026-07-29-001-vrt
LSP version               : lsp-rel-20260729-2041
VDB version               : 406
----------------------------------------------------

Environment

FMC version 7.6.5-106. Other software versions can be also affected.

Resolution

This is expected behavior for FMC (and FTD) hotfix installations. When a hotfix is installed (for example, 7.6.5.1-2 on top of 7.6.5 Build 106), the software version/build shown in the UI and show version command output remain the base release version (7.6.5-106). Hotfixes are verified separately and do not change the displayed base version string.

Verifying Hotfix Installation


To definitively confirm the hotfix is installed on the firewall, check the patch history from the FMC CLI using these steps:


1. Enter expert mode:

> expert


2. Display the patch history:

device:~$ cat /etc/sf/patch_history_detailed
[250424 08:16:59.099] Install 7.4.2-172
[260302 03:02:19.459] Upgrade 7.4.5-2
[260804 12:38:10:676] Upgrade 7.6.5-106
[260804 12:50:53:636] Hotfix Hotfix_CY-2

Additional Considerations


If you are using the "readiness check" for future upgrades, it determines hotfix status from the patch history (not the UI version string), so this behavior is normal and does not impact upgrades.

Cause

This is the designed behavior for FMC hotfix installations. The system maintains the base software version display while tracking hotfix installations separately in the patch history.

Related Content

Revision History

Revision Publish Date Comments
1.0
04-Aug-2026
Initial Release
TAC Authored

Contributed by Cisco Engineers

  • Mikis Zafeiroudis
    Cisco TAC Engineer
  • Ilkin Gasimov
    Cisco TAC Engineer

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products