Connect. Secure. Manage.
Cisco Firewall Upgrade Services
Prepare Cisco firewall and management upgrades with compatibility checks, protected backups, agreed maintenance windows and rollback planning.
Devices supported
across the UK
Client locations
supported
Traffic handled
at peak time
Average
response time
Average response is not a resolution time or a contractual guarantee. Support scope and response commitments are agreed for each engagement.
Cisco firewall upgrade services plan software changes around the traffic your business needs to keep working. We check supported versions, management tools, features and recovery options before the change. Tests then cover the important services that cross the firewall. Successful installation is one check, alongside the health of the wider service.
Defined trust
Make access boundaries explicit rather than relying on an assumed internal network.
Controlled access
Connect identity, policy and network enforcement to the services people actually use.
Evidence for change
Test the intended security outcome and retain useful operational records.
Establish the reason for the change
An upgrade may be driven by a security advisory, support status, a required feature or a known defect. We find the reason and compare candidate releases with the customer's actual platform and setup. The latest available version is not chosen automatically without checking compatibility and operational suitability.
The assessment includes management systems, high-availability peers, VPN clients and integrations. A firewall release may require a particular manager version or change the behaviour of a feature used by the customer. Those dependencies are recorded before a maintenance date is agreed so that a simple-looking device change does not become an unplanned wider migration.
Standards & partnerships
Confidence in the team behind your network.
Cisco Partner
Cisco Meraki
Cyber Essentials
Cyber Essentials PlusMCI Network Services is operated by Proxar Ltd. Certifications apply to the certified legal entity and the scope of its certificates. View accreditation information
Check current health and supported sequencing
We review device state, storage, interfaces, peer synchronisation, policy rollout status and relevant alarms. Existing faults should be understood before upgrading. A software change can expose a weak condition and complicate diagnosis if the team has not captured the original state.
The upgrade sequence follows the supported guidance for the actual source, target and management arrangement. Intermediate versions or prerequisite updates may be necessary. We do not assume that a procedure for one Cisco firewall family or operating mode applies unchanged to another. The plan states the exact order and the checks required before progressing.
A useful starting point
Not sure where to start?
Bring the requirement. We will help you define the engineering work.
Prepare recovery that can be used
Backups, setup exports, images and required credentials are gathered through an approved process. We establish what each recovery item covers and which certificates, keys or external settings need separate protection. A backup file that nobody can decrypt or restore is not a useful rollback plan.
Downgrade and restore options are assessed honestly. Some changes require rebuilding or restoring a supported backup rather than simply selecting the previous image. We find the decision point, likely service impact and access method needed for recovery. The customer should understand those limits before accepting the maintenance risk.
Different environments. The same care.
Built around the work
your network supports.
Finance, banking and the wider private sector. We start with the systems and people that depend on your connections.
Finance & banking
Market-data paths, routing and provider coordination on clients’ behalf.
Financial-market services ↗Offices & multi-site teams
Reliable access between people, workplaces and business applications.
Office network design ↗Data centres & cloud
Network boundaries, workload connections and operational ownership.
Data centre networks ↗Plan for the remaining device and path
For a resilient rollout, we check the capacity and routing available while one component is unavailable. A high-availability pair may still have shared dependencies or feature-specific interruption. We agree which sessions may need to reconnect and which apps require an owner present during the window.
Upstream and downstream behaviour is included. A device returning to service may change neighbour state, routing preference or traffic distribution. We test restoration and failure so that the final stage of the upgrade does not produce an unexpected second disruption. Any claimed reduced-impact procedure is checked against the exact platform prerequisites.
Execute in observable stages
The change record separates pre-checks, software transfer, activation, policy validation and service testing. Engineers capture the relevant state at each stop point. A failed check is investigated before the next stage rather than bypassed because the maintenance window is getting shorter.
We avoid unrelated policy cleanup during the same window unless clearly agreed. Combining a software upgrade with many access changes makes it harder to explain a new fault. The customer receives a clear distinction between the lifecycle change and any extra remediation needed before or after it.
Validate the applications and security controls
Post-upgrade tests include interfaces, routes, NAT, VPNs and representative permitted traffic. We also confirm that important restrictions and inspection actions remain in place. A working internet connection is not enough evidence for a firewall supporting partner services, remote users and internal segmentation.
Logging and management functions are checked because they are essential to future operation. We check event visibility, time consistency and the ability to deploy an approved policy change where appropriate. The report records untested cases and any known limitation instead of presenting every feature as checked merely because the device is reachable.
A remote site also needs a practical recovery contact. We confirm console access, local hands and the availability of replacement media or equipment where relevant. That preparation matters when an appliance does not return after a restart and the normal management connection is no longer available.
Observe and close the maintenance
An agreed observation period looks for delayed issues, such as a scheduled partner connection or a client population returning the next morning. Temporary measures are documented and removed through a controlled process. MCI hands over the final versions, test evidence and updated recovery records, with continuing lifecycle management available through Cisco Secure Firewall services under a separately defined support scope.
Technical references
- Secure Firewall Management Center system configuration — Cisco / Cisco Meraki
- Secure Firewall deployment overview — Cisco / Cisco Meraki
Talk to a specialist
What does your network need next?
Tell us what you are planning, changing or trying to improve. We will help define a practical next step and the engineering scope.
+44 203 196 6566Choose option 1
sales@proxar.co.ukUK-wide service.
Most of our engineers are based in Kent, with a focus on London, Sussex, Essex and Berkshire.
Existing customers should use their agreed support and escalation channels. This form is for service enquiries, not a monitored emergency ticket.
Tell us what you need.
A short outline is enough. Please do not include passwords or sensitive network details.
Thank you. Your enquiry has been submitted.
Please check your name, email and message, then try again.
Your form session expired. Please try again.
Please wait a minute before sending another enquiry.
We could not submit your enquiry. Please call or email us instead.