Cisco Cisco Firepower Management Center 2000

Seite von 6
2
Firepower System Release Notes for Version 6.1.0 Pre-Installation Package
Installing the Pre-Installation Package on a Firepower Management Center
If you do not install the Version 6.1 Pre-Installation package, you cannot update Firepower Management Centers in a high availability pair 
directly to Version 6.1. You must break the high availability configuration before beginning the update path to Version 6.1.
Device Functionality During the Update
For the Version 6.1 Pre-Installation Package, only the Firepower Threat Defense devices reboot. 7000 and 8000 Series devices do not 
perform traffic inspection, switching, routing, NAT, VPN, or related functions during the update. Depending on how your devices are 
configured and deployed, the update process may also affect traffic flow and link state. 
Installing the Pre-Installation Package on a Firepower Management Center
Note:
 Appliances must be running at least Version 6.0.1 or later to apply the Version 6.1 Pre-Installation Package.
1.
On the system that will be used to upload the pre-installation file to the Defense Center, download the file:
for Series 3 and virtual Defense Center:
Sourcefire_3D_Defense_Center_S3_Pre-install-6.0.1.999-1230.sh
Note: 
Download the update directly from the Support site. If you transfer an update file by email, it may become corrupted.
2.
Upload the update to the Firepower Management Center by selecting System > Updates, then clicking Upload Update on the Product 
Updates
 tab. Browse to the update and click Upload.
The update is uploaded to the Firepower Management Center. The web interface shows the type of update you uploaded, its version 
number, and the date and time it was generated.
3.
Redeploy configuration changes to any managed devices. Otherwise, the eventual update of the managed devices may fail.
4.
Make sure that the appliances in your deployment are successfully communicating and that there are no issues reported by the health 
monitor.
5.
Click the system status icon and view the Tasks tab in the Message Center to make sure that there are no tasks in progress.
You must wait until any long-running tasks are complete before you begin the update. Tasks that are running when the update begins 
are stopped, become failed tasks, and cannot be resumed; you must manually delete them from the task queue after the update 
completes. The task queue automatically refreshes every 10 seconds. 
6.
On the System > Updates page, click the install icon next to the update you are installing.
7.
Select the Firepower Management Center and click Install. Confirm that you want to install the update.
Caution:
 If you encounter any other issue with the update (for example, if a manual refresh of the Message Center shows no progress 
for several minutes), do not restart the installation process. Instead, contact Support.
When the update completes, the Firepower Management Center displays a success message.
Installing the Pre-Installation Package to 7000 and 8000 Series Devices, Firepower 
NGIPSv, and ASA FirePOWER modules
You can update multiple devices at once but only if they use the same update file.
Note:
 If you are locally managing the ASA FirePOWER module through ASDM, do not update the ASA FirePOWER module using the 
Firepower Management Center.
For the Version 6.1 Pre-Installation Package, the 7000 and 8000 Series devices, Firepower NGIPSv devices, and ASA FirePOWER modules 
do not reboot.
Caution:
 Do not reboot or shut down your appliance during the update until you see the login prompt. The system may appear inactive 
during the pre-checks; this is expected behavior and does not require you to reboot or shut down your appliance.