Secure Firewall 3100 Threat Defense Getting Started: Firewall Management Center at a Central Headquarters

PDF

Check the version and reimage

Updated: March 18, 2026

Want to summarize with AI?

Log in

Overview

Learn how to check the current Firewall Threat Defense software version and decide whether to reimage the Secure Firewall 3100 to your target release before you begin configuration.

We recommend that you install your target version before you configure the firewall. Alternatively, you can perform an upgrade after you are up and running, but upgrading, which preserves your configuration, may take longer than using this procedure.

What version should I run?

Cisco recommends running a Gold Star release indicated by a gold star next to the release number on the software download page. You can also refer to the release strategy described in https://www.cisco.com/c/en/us/products/collateral/security/firewalls/bulletin-c25-743178.html.

Procedure

1.

Connect to the console port.

Figure 1. Console Port
Console port
2.

At the FXOS CLI, show the running version.

scope ssa

show app-instance

Example:


Firepower# scope ssa
Firepower /ssa # show app-instance

Application Name Slot ID Admin State Operational State Running Version Startup Version Cluster Oper State
---------------- ------- ----------- ----------------- --------------- --------------- ------------------
ftd              1       Enabled     Online            7.6.0.65        7.6.0.65        Not Applicable
3.

If you want to install a new version, perform these steps.

  1. By default, the Management interface uses DHCP. If you need to set a static IP address for the Management interface, enter the following commands.

    scope fabric-interconnect a

    set out-of-band static ip ip netmask netmask gw gateway

    commit-buffer

  2. Perform the reimage procedure in the FXOS troubleshooting guide.

    You will need to download the new image from a server accessible from the Management interface.

    After the firewall reboots, you connect to the FXOS CLI again.

  3. At the FXOS CLI, you are prompted to set the admin password again.

    For zero-touch provisioning, when you onboard the device, for the Password Reset area, be sure to choose No because you already set the password.

  4. Shut down the firewall. See (If Needed) Power off the firewall.