Home
Support
Product Support
Security
Cisco Security Cloud Control
Configuration Guides

Cisco Security Cloud Control: Secure Firewall Device Management

What upgrade paths are supported for FDM-managed devices?
What prerequisites must be met before upgrading an FDM-managed device?
How do I upgrade single, bulk, or HA FDM-managed devices?

View all Saved Content

PDF

Is this content helpful?

Helpful Unhelpful

Suggestions for Improvement

Thank you for your feedback. Your response has been recorded.

Ask about this content

Cisco Security Cloud Control: Secure Firewall Device Management

What upgrade paths are supported for FDM-managed devices?
What prerequisites must be met before upgrading an FDM-managed device?
How do I upgrade single, bulk, or HA FDM-managed devices?

Expand all sections

About this content

Introduction

Overview of Security Cloud Control Firewall Management

Configure basic settings

Overview of Cisco Security Cloud Control
Overview of Security Cloud Control Firewall Management
Overview of Cloud-Delivered Firewall Management Center
Provision Security Cloud Control Firewall Management
Open Security Cloud Control Firewall Management
The Firewall Management dashboard

Manage Firewall administration in Security Cloud Control Firewall Management

Configure general settings
Manage users and groups within Security Cloud Control organization
Manage API-Only users for Security Cloud Control Firewall Management
View Security Cloud Control notifications
View logging settings
Understand user roles in Security Cloud Control Firewall Management

Deploy and manage Secure Connectors for device onboarding

Introduction to Secure Connectors

Onboard devices in Security Cloud Control Firewall Management

Onboard FDM-Managed Device

Manage onboarded device settings

Changing a device's IP address in Security Cloud Control Firewall Management
Changing a device's name in Security Cloud Control Firewall Management
Export a list of devices and services
Export device configuration
External links for devices
Bulk reconnect devices to Security Cloud Control Firewall Management
Moving devices between organizations
Device certificate expiry detection
Write a device note
Delete a device from Security Cloud Control Firewall Management
Manage security devices
Back up Firewall Threat Defense devices
Manage Firewall Threat Defense devices through Security Cloud Control Firewall Management
Security devices overview
Security Cloud Control Firewall Management labels and filtering
Use Security Cloud Control Firewall Management search functionality

Configuring FDM-Managed Devices

Interfaces
Synchronizing Interfaces Added to a Firepower Device using FXOS
Routing
FDM Policy Configuration
Templates
FDM-Managed High Availability
FDM-Managed Device Settings
Use the Security Cloud Control Command Line Interface Tool
Security Cloud Control Public API

Configure Network Address Translation for FDM-managed

Network Address Translation
Order of processing NAT rules
Network Address Translation wizard
Common use cases for NAT

Manage objects

Introduction to objects
Network objects
URL objects
Geolocation objects
DNS group objects
Certificate objects
Remote access VPN objects
Security zone object
Service objects
Security group tag group
Syslog server objects
Troubleshooting Objects

Backing Up FDM-Managed Devices

Backing Up FDM-Managed Devices

Upgrade FDM-Managed Device

FDM software upgrade paths
FDM-Managed device upgrade prerequisites
Upgrade a Single FDM-Managed Device
Bulk FDM-Managed devices upgrade
Upgrade an FDM-Managed High Availability pair
Upgrade to Snort 3.0
Revert from Snort 3.0 for FDM-Managed device
Schedule a security database update

Establish Site-to-Site VPN connection using Security Cloud Control Firewall Management

Introduction to Site-to-Site Virtual Private Network
Site-to-Site VPN concepts
Site-to-Site VPN configuration for FDM-Managed
Site-to-Site VPN Configuration for Cloud-Delivered Firewall Management Center-managed Firewall Threat Defense
Site-to-Site VPN for Secure Firewall ASA
Monitor Site-to-Site Virtual Private Networks

Establish Remote Access VPN connection using Security Cloud Control Firewall Management

Configuring Remote Access VPN for an FDM-Managed Device

Managing Virtual Private Network in Security Cloud Control

Monitor Remote Access Virtual Private Network Sessions

Manage device configuration

Read, discard, and deploy configuration changes
Synchronizing configurations between Security Cloud Control and device

Monitor and report change logs, workflows, and jobs

Manage change logs in Security Cloud Control
Change log entries after deploying to FDM-Managed device
Change log entries after reading changes from an FDM-Managed device
View change log differences
Change request management
Export the change log
FDM-Managed device executive summary report
Monitor jobs in Security Cloud Control
Monitor workflows in Security Cloud Control

Secure Event Connectors

About Secure Event Connectors
Installing Secure Event Connectors
Remove the Secure Event Connector
Finding your device's TCP, UDP, and NSEL port used for Secure Logging Analytics (SaaS)

Security Analytics and Logging Licenses

Security Analytics and Logging licenses

Secure Logging Analytics (SaaS) for FDM-Managed Devices

About Secure Analytics and Logging (SaaS) for FDM-Managed Devices
About Secure Analytics and Logging (SaaS) for FDM-Managed Devices
Implementing Secure Logging Analytics (SaaS) for FDM-Managed Devices
Send FDM Events to Security Cloud Control Events Logging
Send FDM-Managed Events Directly to the Cisco Cloud

Events in Security Cloud Control

About Security Analytics and Logging (SaaS) in Security Cloud Control
Event types in Security Cloud Control
Deprovisioning Cisco Security Analytics and Logging (SaaS)

View Events in Security Cloud Control Firewall Management

View live events
View historical events
Customize the events view
Show and hide columns on the event logging page
Change the time zone for the event timestamps
Customizable event filters
Search and filter events using the event logging page
Event attributes in Security Analytics and Logging

Terraform

About Terraform

Troubleshooting

Troubleshoot a Secure Device Connector
Troubleshoot a Secure Event Connector
Troubleshoot Security Cloud Control
Device connectivity states

FAQ and support

Security Cloud Control
FAQ about onboarding devices to Security Cloud Control
Device types
Security
Troubleshooting
Terminologies and definitions used in Zero-Touch Provisioning
Policy optimization
Connectivity
Complete the initial configuration of a Secure Firewall Threat Defense device using the CLI
What does it mean to be FedRAMP certified
About Data Interfaces
How Security Cloud Control processes personal information
Contact Security Cloud Control support

Cisco Security Cloud Control: Secure Firewall Device Management

Upgrade FDM-Managed Device

Updated: July 14, 2026

Learn how to upgrade FDM-managed images in Security Cloud Control Firewall Management for single devices, multiple devices, high availability pairs, and custom image repositories.

FDM software upgrade paths

Learn how FDM software upgrade paths work for FDM-managed devices when you use your own image repository in Security Cloud Control.

FDM-Managed device upgrade prerequisites

Provides prerequisites for upgrading FDM-managed devices or HA pairs in Security Cloud Control Firewall Management, including image access, connectivity, synchronization, and pending change requirements.

Upgrade a Single FDM-Managed Device

Learn how to upgrade a single FDM-managed device in Security Cloud Control Firewall Managementusing images from the Cisco repository or your own repository, schedule or perform the upgrade, and monitor upgrade progress.

Bulk FDM-Managed devices upgrade

Learn how to upgrade multiple FDM-managed devices in Security Cloud Control Firewall Management, including reviewing prerequisites, selecting compatible images from the Cisco repository or your own repository, scheduling upgrades, and monitoring upgrade progress.

Upgrade an FDM-Managed High Availability pair

Learn how to upgrade an FDM-managed high availability pair in Security Cloud Control Firewall Management using Cisco or custom repository images, and monitor upgrade progress while maintaining HA operations.

Upgrade to Snort 3.0

Learn how to upgrade FDM-managed devices to Snort 3 in Security Cloud Control Firewall Management, including simultaneous device and intrusion prevention engine upgrades, engine-only upgrades, and upgrade progress monitoring.

Revert from Snort 3.0 for FDM-Managed device

Learn how to revert an FDM-managed device from Snort 3 to Snort 2 in Security Cloud Control Firewall Management and monitor the reversion process.

Schedule a security database update

Learn how to schedule and edit security database updates for FDM-managed devices in Security Cloud Control to keep intrusion rules, security intelligence, vulnerability, and geolocation data current.

Need help?

Open a support case

(Requires a Cisco Service Contract)

Bias-free language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.