Contents

Issue

After successfully installing the Hotfix CY (Cisco_Secure_FW_Mgmt_Center_Hotfix_CY-7.6.5.1-2.sh.REL.tar) on Firewall Management Center (FMC) running version 7.6.5-106, the version number displayed in the User Interface (UI) and the output of the show version command output still shows 7.6.5-106 instead of reflecting the hotfix version. The installation completed without errors, but there is uncertainty about whether the version number must change to reflect the hotfix installation.

> show version

-------------------[ FMC1600-4 ]--------------------

Model                     : Cisco Secure Firewall Management Center 1600 (66) Version 7.6.5 (Build 106)

UUID                      : 12345678-1234-1234-1234-1234567890

Rules update version      : 2026-07-29-001-vrt

LSP version               : lsp-rel-20260729-2041

VDB version               : 406

----------------------------------------------------

Environment

FMC version 7.6.5-106. Other software versions can be also affected.

Resolution

This is expected behavior for FMC (and FTD) hotfix installations. When a hotfix is installed (for example, 7.6.5.1-2 on top of 7.6.5 Build 106), the software version/build shown in the UI and show version command output remain the base release version (7.6.5-106). Hotfixes are verified separately and do not change the displayed base version string.

Verifying Hotfix Installation

To definitively confirm the hotfix is installed on the firewall, check the patch history from the FMC CLI using these steps:

1. Enter expert mode:

> expert

2. Display the patch history:

device:~$ cat /etc/sf/patch_history_detailed

[250424 08:16:59.099] Install 7.4.2-172

[260302 03:02:19.459] Upgrade 7.4.5-2

[260804 12:38:10:676] Upgrade 7.6.5-106

[260804 12:50:53:636] Hotfix Hotfix_CY-2

Additional Considerations

If you are using the "readiness check" for future upgrades, it determines hotfix status from the patch history (not the UI version string), so this behavior is normal and does not impact upgrades.

Cause

This is the designed behavior for FMC hotfix installations. The system maintains the base software version display while tracking hotfix installations separately in the patch history.

Related Content

- Cisco Secure Firewall Threat Defense Hotfix Release Notes

- Cisco Technical Support & Downloads

- Cisco bug ID CSCwb10571