Symptom
The first deployment post-upgrade will fail with the following reason:
Rewriting Snort configuration due to system upgrade
Snort instances may be in a "Waiting" state as well, causing traffic interruption. You can confirm in expert mode with the following command:
> expert
$ sudo su
# pmtool status | grep -i snort
Conditions
FTD managed by FDM
Upgrading to 7.x version
Workaround
After the upgrade, do the LSP update, and deploy should be successful.
LSP is used for snort3
Further Problem Description