Upgrade Checklist: Other FTD Devices
Use this checklist to upgrade Firepower 1000/2100 series, ASA 5500-X series, ISA 3000, and FTDv devices.
Complete the checklist every time you upgrade. Skipping steps can result in an unsuccessful upgrade. At all times during the process, make sure that the appliances in your deployment are successfully communicating and that there are no issues reported by the health monitor.
Plan the Upgrade
Maintain deployment compatibility at all times by correctly planning and following an upgrade path.
✓ | Action/Check | Details |
---|---|---|
Verify Upgrade Path Check your place in your upgrade path. Know which upgrade you just performed and which you are performing next. |
||
Check Versions Check current and target versions on the devices:
|
||
Check FMC Compatibility Check if the FMC will be able to manage the devices after you upgrade them. If not, revise your upgrade path so you upgrade the FMC first. |
||
Read Release Notes Read the release notes, paying special attention to the things that can affect upgrade, including:
|
Pre-Upgrade Actions and Checks
Minimize disruption by performing prechecks outside the maintenance window.
✓ | Action/Check | Details |
---|---|---|
Make Required Configuration Changes Make required pre-upgrade configuration changes, and be prepared to make required post-upgrade configuration changes. |
||
Check Disk Space Run a preliminary disk space check for the Firepower software upgrade. |
||
Get Firepower Software Upgrade Package Obtain the correct Firepower software upgrade package. Do not untar signed (.tar) packages. You can either:
|
||
Check Bandwidth Make sure you have the bandwidth to perform a large data transfer to your managed devices. |
Guidelines for Downloading Data from the Firepower Management Center to Managed Devices (Troubleshooting TechNote) |
|
Push Firepower Software Upgrade Package Push the upgrade package to the devices. Requires Version 6.2.3+. |
||
Run Firepower Software Readiness Check Run a readiness check. Requires Version 6.1+. |
||
Back Up Devices Use the FMC to back up configuration data for supported FTD platforms (not all FTD platforms support backup). Back up to an external location and verify transfer success. Requires Version 6.3+. |
||
Verify Appliance Access Make sure your computer can connect to the FMC’s management interface and to the device’s management interface, both without traversing the device itself. |
||
Schedule Maintenance Window Schedule a maintenance window when it will have the least impact, considering the tasks you must perform, the upgrade's effect on traffic flow and inspection, and the time the upgrade is likely to take. |
FTD Upgrade Behavior: Other Devices and |
Upgrade the Devices
Because upgrades can cause interruptions in traffic flow or inspection, perform them in a maintenance window.
✓ | Action/Check | Details |
---|---|---|
Upgrade Hosting If needed, upgrade the hosting environment (FTDv). |
See the documentation for your hosting environment. |
|
Upgrade Firepower Software Upgrade the Firepower software. |