Manage software upgrades

The Software Upgrade Planner page displays a summary of upgrade opportunities across your deployment. The Summary section provides an overview of:

• Devices with upgrades available

• Total available fixes

• Details on threat campaigns

• Security vulnerability fixes

• Bug fixes

You can click View all in the CVE Fixes or Bug Fixes tiles to review the corresponding issues across your deployment.

• Multiple upgrade options are available based on vulnerabilities, bugs, and new features. The Cisco-suggested version is indicated by a gold star. Choose the version that suits your requirements.

• For each device, the planner displays the current software version and suggested upgrade versions. If a device is affected by one or more active threat campaigns, the current software version displays the number of threat campaigns affecting the device.

• Hover over the Current version to view additional details, including the current software version, vulnerabilities found, bugs found, and the active threat campaigns affecting the device.

• Select a threat campaign to open the corresponding Cisco Talos Intelligence blog and learn more about the campaign.

The Product Upgrades page opens in Cloud-Delivered Firewall Management Center, where you can perform the upgrade.

• View available upgrade packages.

• Perform an upgrade by clicking Upgrade in the Actions column. For more information, see Cisco Secure Firewall Threat Defense Upgrade Guide for Cloud-delivered Firewall Management Center.

The device details page displays Suggested and Golden versions. For each suggested version, you can review:

• Active threat campaigns resolved

• Security vulnerability fixes and bug fixes

• Estimated downtime

• New features included in the release

• Link to detailed release notes

Use this information to compare the available upgrade versions and determine the most appropriate upgrade version for your deployment.

• These tabs list the vulnerabilities and bugs affecting the selected device. You can search and filter the results or export the list as a CSV file.

• Select a CVE ID or bug ID to open the details pane. The details pane provides AI-generated insights to help you understand the issue, including:

  • Root cause analysis that summarizes the issue and its potential impact.

  • Workaround information, when available, to help mitigate the issue before upgrading.

  • Remediation guidance that identifies how many devices in your deployment are affected and explains whether upgrading resolves the issue.

• In the Bug fixes tab, bugs are categorized as Impacting bugs and Other bugs. Impacting bugs are affecting the selected device and its environment. You can search the list, filter bugs by status (Fixed bugs, Open bugs, or All), and export the results as a CSV file.

You can use the Software Upgrade Planner to evaluate suggested software versions, review threat campaign exposure, analyze security vulnerabilities and bug fixes, and use AI-generated remediation insights to make informed upgrade decisions.