Cisco Cisco Firepower Management Center 2000

Version 5.2.0.6

Sourcefire 3D System Release Notes

34

Known Issues

Center. Additionally, you cannot manage the VPN deployment from the new 

Defense Center. As a workaround, remove the VPN deployment from the 

stack, cluster, or clustered stack before unregistering it from the Defense 

Center. (128816, 130728)

In some cases, the system experiences issues with user account 

management if devices running Version 5.1.1.x are managed by a Defense 

Center running Version 5.2.x.x. As a workaround, update your managed 

devices to Version 5.2. (130024)

If a managed device processes traffic only from the initiator of a TCP 

connection, the system does not log a connection event at the end of the 

connection. (126040)

If you create a custom saved search for intrusion events with the Generator 

(GID) field populated, the search returns empty. (126109)

In some cases after completing a scheduled rule update import and 

subsequent intrusion policy reapply, Defense Centers in a high availability 

configuration may incorrectly show intrusion policies as out-of-date. 

(126670)

If you register a managed device as the only device on a Defense Center 

with an existing custom network discovery policy configuration, the device 

does not detect hosts or users until you edit, modify, and reapply the 

existing network discovery policy. (127633)

If you modify the device configuration on a clustered stack and immediately 

apply your changes, the apply fails and the system displays an error 

message in the task status queue. The device configuration apply succeeds 

after a second attempt. (121625)

In some cases, custom intrusion rule classifications referenced by 

correlation rules revert to predefined rule classifications after you install an 

intrusion rule update. (122163)

If you configure a custom analysis dashboard widget based on the 

Connection Summary Data table and the Ingress Interface, Ingress Security 

Zone, Egress Interface, or Egress Security Zone fields, the widget displays no 

data. (122857)

If you edit and save your access control policy ten or more times without 

applying the changes to your devices and then install a new version of the 

Sourcefire 3D System, the system shows your access control policy as 

unapplied. To avoid this issue, apply access control policies completely 

before installing system updates. (123003)

If the DNS entries in your network environment for your LDAP server's 

hostname and IP address do not match, LDAP authentication may fail. 

(123447)

In rare cases, the Defense Center may not back up events onto remote 

storage. (124350)