Cisco Cisco Firepower Management Center 4000

Version 5.3

Sourcefire 3D System Release Notes

23

Updating Your Appliances

7. Select the devices where you want to install the update.

If you are updating a stacked pair, selecting one member of the pair 

automatically selects the other. You must update members of a stacked pair 

together.

8. Click Install. Confirm that you want to install the update and reboot the 

devices.
The update process begins. You can monitor the update's progress in the 

Defense Center’s task queue (System > Monitoring > Task Status).
Note that managed devices may reboot twice during the update; this is 

expected behavior.

If you encounter issues with the update (for example, if the task 

queue indicates that the update has failed or if a manual refresh of the task 

queue shows no progress for several minutes), do not restart the update. 

Instead, contact Support.

9. Select Devices > Device Management and confirm that the devices you updated 

have the correct software version: Version 5.3.0.

10. Verify that the appliances in your deployment are successfully communicating 

and that there are no issues reported by the health monitor.

11. Reapply device configurations to all managed devices.

To reactivate a grayed-out Apply button, edit any interface in the device 

configuration, then click Save without making changes.

12. Reapply access control policies to all managed devices.

Applying an access control policy may cause a short pause in traffic flow and 

processing, and may also cause a few packets to pass uninspected. For more 

information, see the Sourcefire 3D System User Guide.

13. If a patch for Version 5.3 is available on the Support site, apply the latest patch 

as described in the Sourcefire 3D System Release Notes for that version.

Using the Shell to Perform the Update

Although Sourcefire recommends that you use the web interface on your 

Defense Centers to perform updates, there may be rare situations where you 

need to update the appliance using the bash shell.
For the Version 5.3 update, all appliances reboot. Managed devices do not 

perform traffic inspection, switching, routing, NAT, VPN, or related functions 

during the update. Depending on how your devices are configured and deployed, 

the update process may also affect traffic flow and link state. For more 

information, see 

 on page 11.