Sourcefire and Cisco FirePower/FireSight
 

Anyone know this stuff?

I have a customer with Sourcefire Management and Sensors running version 4.10. So out of date, it's not funny. The intention is to get things up to FirePower/FireSight 6.2. As far as I can tell the hardware is up to it.

AFAIK, there's no upgrade path from 4.10 to 6.2 (happy to be corrected) so I'm looking at manually recreating policies and such. The environment is not that complex so I can live with that. What I need help with is the imaging of the appliances.

I've seen articles that say booting from a USB isn't possible, that the ISO has to be pulled from an SCP server. Is this true? What I want to do is to put a new FMC/FTD 6.2 image on the existing hardware.

Any guidance will be gratefully appreciated.

TIA
Mark

Upgrade the FMC first, place the file for your devices on the FMC and deploy from there?

Have a look at this...
https://www.cisco.com/c/en/us/suppor...wer-threa.html

Thanks for that. Because the current setup is so far out of whack the plan was to do a clean install of FMC. I've had a look around on Cisco's site and I keep seeing something like "...don't connect a USB to a KVM as the appliance might try to boot from that mass storage device...".

Can I image an FS750 Sourcefire appliance from USB or do I have to do the scp/sftp thing?

I've reached out to my local Cisco SE but nothing...

reached out.... god