End-of-Support for management of Secure Firewall Threat Defense devices, Version 7.2.x and 7.3.x, managed by Cloud-Delivered Firewall Management Center

Which version of Threat Defense will Cloud-Delivered Firewall Management Center stop managing?

Cloud-Delivered Firewall Management Center will stop managing Threat Defense devices running Versions 7.2.x and 7.3.x, from July 24, 2027.

Why is this change necessary?

This change is necessary to ensure compatibility and security for our customers' systems. As we upgrade our systems, it is essential that the latest versions of Threat Defense devices are supported to maintain reliability and performance.

From July 24, 2027, can I use my existing Threat Defense 7.2.x and 7.3.x devices?

We will not support the management of Threat Defense devices running Versions 7.2.x and 7.3.x from Cloud-Delivered Firewall Management Center after July 24, 2027. You will not be able to make or deploy changes to devices running 7.2.x and 7.3.x, or earlier versions, except to upgrade or unregister them. Impacted devices will remain visible in Cloud-Delivered Firewall Management Center in read-only mode, and new changes cannot be deployed to the devices.

What are the recommended upgrade options?

You are required to upgrade to at least Versions 7.4.x. The Cisco-recommended version is 7.6.6.

Can I register new Threat Defense 7.2.x and 7.3.x devices?

While the system will allow you to register new Threat Defense running Versions 7.2.x and 7.3.x devices to Cloud-Delivered Firewall Management Center, from July 24, 2027, these newly registered devices will be in read-only mode only. You are required to upgrade to Version 7.4.x or to Cisco-recommended Version 7.6.6 prior to registration or the July 24, 2027, deadline.

What will happen if I don't upgrade?

From July 24, 2027, you will not be able to make or deploy changes to Threat Defense devices running Versions 7.2.x and 7.3.x and earlier, except to upgrade or unregister. Failing to upgrade leaves you vulnerable to compatibility issues, security issues, and possible downtime. To minimize disruption, you are required to upgrade now.

Will there be any impact on my existing systems or applications?

Upgrading is unlikely to have any significant impact on your current deployment. If you face any issues during the upgrade process, contact Cisco Technical Assistance (TAC) - https://mycase.cloudapps.cisco.com/case.

For assistance in upgrading, Cisco offers the LevelUp program. You can request assistance using the following link: https://cloud.path.cisco.com/lp-a01-secure-firewall-levelup

How do I upgrade?

For information about upgrading Threat Defense devices, go to https://www.cisco.com/go/ftd-cdfmc-upgrade.

Are there costs associated with upgrade?

The software upgrade has no additional cost. However, Cisco Firepower 4110, 4120, 4140, and 4150 devices running Threat Defense Version 7.2.x require a hardware refresh because they cannot be upgraded to a supported version. Contact your Cisco account team for assistance with the hardware refresh.

Is there an exception for customers who are not able to complete the device upgrade before July 24, 2027?

No, there are no exceptions to this requirement.

What if I'm unsure about how to proceed?

Reach out to Cisco Technical Assistance Center (TAC) (or the Cisco account team) for clarifications.