Just got the notification pushed to my dashboard. Patch and upgrade season is open.
Key points from the release notes:
* FTD native on Kubernetes (FMC managed). Finally.
* Multi-instance routing for FTD on KVM/ESXi.
* Snort 3.15. TLS 1.3 inspection.
* "Streamlined" policy migration for 6.7 -> 8.0.
The risk assessment:
* Kubernetes integration is the main pull. If you're not containerizing, the value drops.
* Jump from 6.x/7.x to 8.0 is a major version hop. Expect migration pain.
* "Streamlined" usually means "still complex, but we wrote a script." Test the migration path in a full non-prod replica first.
* New features = new bugs. Schedule the upgrade for a low-traffic window and have a solid rollback plan (image backup, config backup).
Running 7.2.5 here. My take: Wait for 8.0.1 unless you specifically need the k8s feature. The operational risk of a .0 release outweighs the benefits for most stable deployments.
back to monitoring