Secure Firewall 1210/20 Threat Defense Getting Started: Firewall Management Center at a Central Headquarters

PDF

Check the version and reimage

Updated: February 5, 2026

Overview

We recommend that you install your target version before you configure the firewall.

We recommend that you install your target version before you configure the firewall. Alternatively, you can perform an upgrade after you are up and running, but upgrading, which preserves your configuration, may take longer than using this procedure.

What version should I run?

Cisco recommends running a Gold Star release indicated by a gold star next to the release number on the software download page. You can also refer to the release strategy described in https://www.cisco.com/c/en/us/products/collateral/security/firewalls/bulletin-c25-743178.html.

Procedure

1.

Connect to the console port using either port type.

Figure 1. Console Port
Console port
2.

At the FXOS CLI, show the running version.

scope ssa

show app-instance

Example:


Firepower# scope ssa
Firepower /ssa # show app-instance

Application Name Slot ID Admin State Operational State Running Version Startup Version Cluster Oper State
---------------- ------- ----------- ----------------- --------------- --------------- ------------------
ftd              1       Enabled     Online            7.6.0.65        7.6.0.65        Not Applicable
3.

If you want to install a new version, perform these steps.

  1. By default, the Management interface uses DHCP. If you need to set a static IP address for the Management interface, enter the following commands.

    scope fabric-interconnect a

    set out-of-band static ip ip netmask netmask gw gateway

    commit-buffer

  2. Perform the reimage procedure in the FXOS troubleshooting guide.

    You will need to download the new image from a server accessible from the Management interface.

    After the firewall reboots, you connect to the FXOS CLI again.

  3. At the FXOS CLI, you are prompted to set the admin password again.

    For zero-touch provisioning, when you onboard the device, for the Password Reset area, be sure to choose No because you already set the password.

  4. Shut down the firewall. See (If Needed) Power off the firewall.