Cisco Cisco Firepower Management Center 2000
16
FireSIGHT System Release Notes
Installing the Update
Updating Defense Centers
Use the procedure in this section to update your Defense Centers, including virtual Defense Centers. For the Version
5.4.1.1 update, Defense Centers reboot.
5.4.1.1 update, Defense Centers reboot.
Caution:
You must update your DC2000 and DC4000 BIOs to Version 2.0.1b in order to update your appliances to Version
5.4.1.1. Download the BIOs update via the Cisco Support site.
Caution:
Before you update the Defense Center, reapply access control policies to any managed devices. Otherwise,
the eventual update of the managed device may fail.
Caution:
Do not reboot or shut down your appliances during the update until after you see the login prompt. The system
may appear inactive during the pre-checks portion of the update; this is expected behavior and does not require you to
reboot or shut down your appliances.
reboot or shut down your appliances.
Note:
If you have inline normalization enabled and you update a Defense Center currently running Version 5.3.x to Version
5.4, the update process does not change the behavior of your policies. The system now adds user layers as necessary
to preserve the settings that carried over.
to preserve the settings that carried over.
To update a Defense Center:
1.
Read these release notes and complete any required pre-update tasks.
For more information, see
.
2.
Download the update from the Support site:
—
for Series 3 and virtual Defense Centers:
Sourcefire_3D_Defense_Center_S3_Upgrade-5.4.1.1-23.sh
Note:
Download the update directly from the Support site. If you transfer an update file by email, it may become
corrupted.
3.
Upload the update to the Defense Center by selecting System > Updates, then clicking Upload Update on the
Product Updates tab. Browse to the update and click Upload.
Product Updates tab. Browse to the update and click Upload.
The update is uploaded to the Defense Center. The web interface shows the type of update you uploaded, its version
number, and the date and time it was generated.
number, and the date and time it was generated.
4.
Make sure that the appliances in your deployment are successfully communicating and that there are no issues
reported by the health monitor.
reported by the health monitor.
5.
View the task queue (System > Monitoring > Task Status) to make sure that there are no tasks in progress.
You must wait until any long-running tasks are complete before you begin the update. Tasks that are running when
the update begins are stopped, become failed tasks, and cannot be resumed; you must manually delete them from
the task queue after the update completes. The task queue automatically refreshes every 10 seconds.
the update begins are stopped, become failed tasks, and cannot be resumed; you must manually delete them from
the task queue after the update completes. The task queue automatically refreshes every 10 seconds.
6.
Select System > Updates.
7.
Click the install icon next to the update you uploaded.
8.
Select the Defense Center and click Install. Confirm that you want to install the update and reboot the Defense
Center.
Center.
The update process begins. You can begin monitoring the update’s progress in the task queue (System > Monitoring
> Task Status). However, after the Defense Center completes its necessary pre-update checks, you are logged out.
When you log back in, the Upgrade Status page appears. The Upgrade Status page displays a progress bar and
provides details about the script currently running.
> Task Status). However, after the Defense Center completes its necessary pre-update checks, you are logged out.
When you log back in, the Upgrade Status page appears. The Upgrade Status page displays a progress bar and
provides details about the script currently running.