Cisco Cisco Firepower Management Center 2000
Firepower System Release Notes
Installing the Update
22
Updating Firepower Threat Defense Devices
After you update your Firepower Management Centers to Version 6.0.1, use them to update the devices they manage. You can update ASA
devices and Firepower 9300 Security Appliances running the Firepower Threat Defense preview version 6.0.0 to Version 6.0.1. This
procedure documents update of Firepower Threat Defense running on at least Version 6.0.0. A Firepower Management Center must be
running at least Version 6.0.1 to update Firepower Threat Defense devices to Version 6.0.1. Because they do not have a web interface, you
must use the Firepower Management Center to update these devices.
devices and Firepower 9300 Security Appliances running the Firepower Threat Defense preview version 6.0.0 to Version 6.0.1. This
procedure documents update of Firepower Threat Defense running on at least Version 6.0.0. A Firepower Management Center must be
running at least Version 6.0.1 to update Firepower Threat Defense devices to Version 6.0.1. Because they do not have a web interface, you
must use the Firepower Management Center to update these devices.
Updating managed devices is a two-step process. First, download the update from the support site and upload it
to the managing
to the managing
Firepower Management Center
r. Next, install the software. You can update multiple devices at once,
but only if they use the same update file.
Caution:
Before you update a managed device, use its managing Firepower Management Center to redeploy
policies to the managed device. Otherwise, the managed device update may fail
Caution:
Do not reboot or shut down your appliances during the update until after you see the login prompt.
To update your appliances, see the guidelines and procedures outlined below:
Step 1
Read these release notes and complete any required pre-update tasks.
For more information, see
Step 2
Update the software on the devices’ managing Firepower Management Center; see
Step 3
If you are updating a Firepower 9300 Security Appliance, update the operating system to FXOS 1.1.4
and restart the system; for more information see the
and restart the system; for more information see the
Cisco FXOS Firepower Chassis Manager
Configuration Guide
.
Caution:
Updating the Firepower 9300 Security Appliance to FXOS 1.1.4 causes a disruption in traffic. This is
expected.
You
must
update the ROMMON image on ASA Firepower modules to Version 1.1.8 prior to updating to Version
6.0.1. For more information about updating the ROMMON image, see Cisco ASA Series General Operations CLI Configuration Guide.
Step 4
Download the update from the Support site:
for Firepower Threat Defense running on the ASA 5506-X, ASA 5506H-X, ASA 5506W-X, ASA 5508-X, ASA
5512-X, ASA 5515-X, ASA 5516-X, ASA 5525-X, ASA 5545-X, ASA 5555-X, or on VMware:
5512-X, ASA 5515-X, ASA 5516-X, ASA 5525-X, ASA 5545-X, ASA 5555-X, or on VMware:
Cisco_FTD_Upgrade-6.0.1-1213.sh
for Firepower Threat Defense running on the Firepower 9300 Security appliance:
6.0.1-1213.SPA.csp
for Firepower Threat Defense Virtual: VMware
Cisco_FTD_Upgrade-
6.0.1-
1213.
Step 5
Upload the update to the Firepower Management Center by selecting System > Updates, then clicking
Upload Update on the Product Updates tab. Browse to the update and click Upload.
Upload Update on the Product Updates tab. Browse to the update and click Upload.
The update is uploaded to the Firepower Management Center. The web interface shows the type of update
you uploaded, its version number, and the date and time it was generated. The page also indicates whether
a reboot is required as part of the update.
you uploaded, its version number, and the date and time it was generated. The page also indicates whether
a reboot is required as part of the update.
Step 6
Make sure the appliances in your deployment are successfully communicating that there are no issues
reported by the health monitor.
reported by the health monitor.
Step 7
Click the install icon next to the update you are installing.
Step 8
Select the devices where you want to install the updated.