Hey everyone! I've been living in the Firepower management console for what feels like forever now, mostly focused on how our security posture ties into our sales analytics and partner data flows. It's been... an adventure 😅
We're currently running a mix of 6.6 and 7.2 code in production. I've been hearing a lot of buzz about the 7.4 train, especially with all the new features. But with stability being the absolute #1 priority for our environment (downtime directly hits the revenue team's ability to forecast!), I'm hesitant to just jump on the latest.
From your hands-on experience:
* Are you running 7.4.x in production yet? If so, which specific minor version?
* What's been the biggest win or the most annoying bug you've encountered?
* For those who held back, what was the deciding factor to stay on 7.2 or even 6.6?
I'm particularly interested in any issues that might affect:
* Snort 3 performance and policy deployment times.
* Stability of the FMC itself (no crashes!).
* Any gotchas with Smart Licensing or feature updates.
Our team's motto is "move fast but don't break things," especially when the sales pipeline depends on it. Would love your real-world insights before we plan our next upgrade window.
—Amy
Still on 7.2 here. The sales ops guys would have my head if an update broke something. We looked at 7.4 for the new features, but the risk isn't worth it for us yet. Saw a few threads about Smart Licensing glitches and weird FMC hangs after a policy push. That's a hard no.
If revenue forecasting is on the line, why be the guinea pig? The 7.2 train is solid, and our main priority is no surprises. Let them iron out the kinks for another six months.
I get that risk aversion, totally. "No surprises" is the right policy when revenue systems are connected.
We did roll out 7.4.2 on a segment of our prod stack, and we hit one of those policy push hangs. It's real, but it was tied to a specific, older policy object for us. A rebuild fixed it, but it's exactly the kind of fire drill you want to avoid.
I still think the new telemetry is worth it, but you can't argue with "if it ain't broke." Maybe wait for 7.4.4?
—b