Cisco Cisco Firepower Management Center 2000
Firepower System Release Notes
Before You Begin: Important Update and Compatibility Notes
9
In addition, we have greatly expanded the file types we support for automatic dynamic analysis from just
executable files to include PDF and Office documents.
executable files to include PDF and Office documents.
Expanded Management Functionality
Multiple Domain Management
To address the service provider market which must manage separate customer environments, as well as
enterprises with acquisitions (resulting in overlapping IP addresses) or geographic business units that need to be
managed separately, the Firepower Management Center now has the ability to create multiple management
domains. These domains (up to 50) enable separate management environments and are administered using
granular role-based access control (RBAC). Each domain provides separate event data, reporting, and network
maps.
enterprises with acquisitions (resulting in overlapping IP addresses) or geographic business units that need to be
managed separately, the Firepower Management Center now has the ability to create multiple management
domains. These domains (up to 50) enable separate management environments and are administered using
granular role-based access control (RBAC). Each domain provides separate event data, reporting, and network
maps.
Policy Hierarchy and Inheritance
To support multiple domain management and make policy administration more efficient, Version 6.0 provides the
ability to create a hierarchy of policies. Global policies (e.g., access control) can be established that will apply to
all management environments. A policy hierarchy can then be constructed underneath the global policy level to
represent different environments, different companies, different business units, or different parts of the
organization. Each of these policy environments will inherit the policies of the hierarchy above it, allowing for more
consistent and efficient policy management.
ability to create a hierarchy of policies. Global policies (e.g., access control) can be established that will apply to
all management environments. A policy hierarchy can then be constructed underneath the global policy level to
represent different environments, different companies, different business units, or different parts of the
organization. Each of these policy environments will inherit the policies of the hierarchy above it, allowing for more
consistent and efficient policy management.
Expanded ASDM Management Availability
Cisco’s Adaptive Security Device Manager (ASDM) is the local management feature for Cisco ASA with
FirePOWER Services. It was introduced as part of the Cisco ASA 5506-X, ASA 5508-X, and ASA 5516-X
appliances. With Firepower v6.0, ASDM is now available on the remaining Cisco ASA with FirePOWER Services
appliances (ASA 5512-X / ASA 5515-X / ASA 5525-X / ASA 5545-X / ASA 5555-X / ASA 5585-X).
FirePOWER Services. It was introduced as part of the Cisco ASA 5506-X, ASA 5508-X, and ASA 5516-X
appliances. With Firepower v6.0, ASDM is now available on the remaining Cisco ASA with FirePOWER Services
appliances (ASA 5512-X / ASA 5515-X / ASA 5525-X / ASA 5545-X / ASA 5555-X / ASA 5585-X).
Before You Begin: Important Update and Compatibility
Notes
Notes
Before you begin the update process for Version 6.0.0.1, you should familiarize yourself with the behavior of the
system during the update process, as well as with any compatibility issues or required pre- or post-update
configuration changes.
system during the update process, as well as with any compatibility issues or required pre- or post-update
configuration changes.
Caution:
Cisco strongly recommends you perform the update in a maintenance window or at a time when the
interruption will have the least impact on your deployment.
For more information, see the following sections:
Configuration and Event Backup Guidelines
Before you begin the update, Cisco strongly recommends that you delete or move any backup files that reside on
your appliance, then back up current event and configuration data to an external location.
your appliance, then back up current event and configuration data to an external location.