Cisco Cisco Firepower Management Center 2000

Upload the update to the Defense Center by selecting 

, then clicking 

 on the 

Product Updates tab. Browse to the update and click 

.

The update is uploaded to the Defense Center. The web interface shows the type of update you uploaded, 
its version number, and the date and time it was generated. The page also indicates whether a reboot is 
required as part of the update.

Make sure that the appliances in your deployment are successfully communicating and that there are no 
issues reported by the health monitor.

Click the install icon next to the update you are installing.

The Install Update page appears.

Select the ASA FirePOWER devices where you want to install the update.

Click 

. Confirm that you want to install the update and reboot the ASA FirePOWER devices.

The update process begins. You can monitor the update's progress in the Defense Center’s task queue 
(

).

Note that ASA FirePOWER devices may reboot twice during the update; this is expected behavior.

If you encounter issues with the update (for example, if the task queue indicates that the update has failed 
or if a manual refresh of the task queue shows no progress for several minutes), do not restart the update. 
Instead, contact Support.

Select 

and confirm that the ASA FirePOWER devices you updated have the 

correct software version: Version 5.3.1.1.

Verify that the appliances in your deployment are successfully communicating and that there are no 
issues reported by the health monitor.

Reapply device configurations to all ASA FirePOWER devices.

To reactivate a grayed-out 

 button, edit any interface in the device configuration, then click 

 

without making changes.

Reapply access control policies to all ASA FirePOWER devices.

Applying an access control policy may cause a short pause in traffic flow and processing, and may also 
cause a few packets to pass uninspected. For more information, see the FireSIGHT System User Guide.

If a patch for Version 5.3.1.1 is available on the Support site, apply the latest patch as described in the 
FireSIGHT System Release Notes for that version. You must update to the latest patch to take advantage 
of the latest enhancements and security fixes.

Although Cisco recommends that you use the web interface on your Defense Centers to perform updates, 
there may be rare situations where you need to update the appliance using the bash shell.