Cisco Cisco Firepower Management Center 2000

Use the Defense Center’s web interface to perform the update. Update the Defense Center first, then use 
it to update the devices it manages.

Update your Defense Centers before updating the devices they manage.

When you begin to update one Defense Center in a high availability pair, the other Defense Center in the 
pair becomes the primary, if it is not already. In addition, the paired Defense Centers stop sharing 
configuration information; paired Defense Centers do not receive software updates as part of the regular 
synchronization process.

To ensure continuity of operations, do not update paired Defense Centers at the same time. First, 
complete the update procedure for the secondary Defense Center, then update the primary Defense 
Center.

After you perform the update on either the Defense Center or managed devices, you must reapply device 
configuration and access control policies. Applying an access control policy may cause a short pause in 
traffic flow and processing, and may also cause a few packets to pass uninspected. For more information, 
see the FireSIGHT System User Guide.

There are several additional post-update steps you should take to ensure that your deployment is 
performing properly. These include:

verifying that the update succeeded

making sure that all appliances in your deployment are communicating successfully

updating to the latest patch for Version 5.3.1.6, if available, to take advantage of the latest 
enhancements and security fixes

optionally, updating your intrusion rules and vulnerability database (VDB) and reapplying your 
access control policies

making any required configuration changes based on the information in 

The next sections include detailed instructions not only on performing the update, but also on completing 
any post-update steps. Make sure you complete all of the listed tasks.

Use the procedure in this section to update your Defense Centers, including virtual Defense Centers. For 
the Version 5.3.1.6 update, Defense Centers reboot.

Before you update the Defense Center, reapply access control policies to any managed devices. 
Otherwise, the eventual update of the managed device may fail.