Cisco Cisco Firepower Management Center 2000

Version 5.3

Sourcefire 3D System Release Notes

27

Known Issues

Resolved an issue where drilling down in a custom workflow redirected you 

to the incorrect packet view page for an intrusion event. (130620)

Resolved an issue where, in some cases, the system restore boot option 

did not output to the serial port on managed devices even if you selected 

Physical Serial Port as the remote console access option. (130772)

Improved the stability of clustered managed devices when failing over after 

a hardware failure. (130811, 130812, 131031, 133088, 130602)

Resolved a failover synchronization issue on clustered managed devices. 

(130829)

Improved the system's malware analysis and blocking capabilities when 

handling file transfer protocol (FTP) traffic. (130888, 133134)

Resolved an issue where, in rare cases, the intrusion policy page failed to 

display. (131181)

Resolved an issue where, in rare cases, the table view of servers (Analysis > 

Hosts > Servers) duplicated servers and produced inaccurate server counts. 

(131329)

Resolved an issue where, in some cases, if you configured static routes as 

described in KB article 000001950 and made a subsequent change to the 

network configuration, the system dropped the static routes until after the 

next system reboot. (131646)

Improved the stability of stacking three managed devices in a Tri-Stack. 

(131836, 131896)

Resolved an issue where the system misplaced the home directory files for 

user accounts after updating to a major version of the Sourcefire 3D 

System. (132503)

Resolved an issue where disabling the Quoted-Printable Decoding Depth 

advanced option in your intrusion policy did not prevent the system from 

generating events on intrusion rule 124:11. (132538)

Known Issues

The following known issues are reported in Version 5.3:

If the system generates intrusion events with a Destination Port/ICMP Code of 

0

, the Top 10 Destination Ports section of the Intrusion Event Statistics page 

(Overview > Summary > Intrusion Event Statistics) omits port numbers from the 

display. (125581)

Defense Center local configurations (System > Local > Configuration) are not 

synchronized between high availability peers. You must edit and apply the 

changes on all Defense Centers, not just the primary. (130612, 130652)