Upgrade Checklist: FTD on Firepower 4100/9300 Chassis
Use this checklist to upgrade Firepower 4100/9300 chassis with FTD
Complete the checklist every time you upgrade. Skipping steps can result in an unsuccessful upgrade. At all times during the process, make sure that the appliances in your deployment are successfully communicating and that there are no issues reported by the health monitor.
Plan the Upgrade
Maintain deployment compatibility at all times by correctly planning and following an upgrade path.
✓ | Action/Check | Details |
---|---|---|
Verify Upgrade Path Check your place in your upgrade path. Know which upgrade you just performed and which you are performing next. |
||
Check Versions Check current and target versions on the devices:
|
||
Check FMC Compatibility Check if the FMC will be able to manage the devices after you upgrade them. If not, revise your upgrade path so you upgrade the FMC first. |
||
Read Release Notes Read the release notes, paying special attention to the things that can affect upgrade, including:
|
and |
Pre-Upgrade Actions and Checks
Minimize disruption by performing prechecks outside the maintenance window.
✓ | Action/Check | Details |
---|---|---|
Make Required Configuration Changes Make required pre-upgrade configuration changes, and be prepared to make required post-upgrade configuration changes. |
and |
|
Check Disk Space Run a preliminary disk space check for the Firepower software upgrade. |
||
Get FXOS Upgrade Package Obtain the correct FXOS upgrade package. |
||
Get Firepower Software Upgrade Package Obtain the correct Firepower software upgrade package. Do not untar signed (.tar) packages. You can either:
|
||
Check Bandwidth Make sure you have the bandwidth to perform a large data transfer to your managed devices. |
Guidelines for Downloading Data from the Firepower Management Center to Managed Devices (Troubleshooting TechNote) |
|
Push Firepower Software Upgrade Package Push the upgrade package to the devices. We strongly recommend (and sometimes require) you push before you begin the required companion FXOS upgrade. Requires Version 6.2.3+. |
||
Run Firepower Software Readiness Check Run a readiness check. Requires Version 6.1+. |
||
Back Up Devices Use the FMC to back up configuration data for supported FTD platforms (not all FTD platforms support backup). Back up to an external location and verify transfer success. Requires Version 6.3+. |
||
Verify Appliance Access Make sure your computer can connect to the FMC’s management interface and to the device’s management interface, both without traversing the device itself. |
||
Schedule Maintenance Window Schedule a maintenance window when it will have the least impact, considering the tasks you must perform, the upgrade's effect on traffic flow and inspection, and the time the upgrade is likely to take. |
FTD Upgrade Behavior: Firepower 4100/9300 Chassis and |
Upgrade the Devices
Because upgrades can cause interruptions in traffic flow or inspection, perform them in a maintenance window.
✓ | Action/Check | Details |
---|---|---|
Upgrade FXOS If needed, upgrade FXOS. To avoid interruptions in traffic flow and inspection, upgrade the chassis in high availability pairs and inter-chassis clusters one at a time. |
||
Upgrade Firepower Software Upgrade the Firepower software. |