Cisco Cisco Firepower Management Center 4000
Version 5.3.0.2
Sourcefire 3D System Release Notes
32
Known Issues
•
On 3D9900 devices, passive interfaces not in security zones do not
generate intrusion or connection events. As a workaround, create and
specify a security zone for all passive interfaces on this device model.
(141663)
•
In rare cases, when your system triggers an alert on the first data packet of
a TCP session from a server, the alert may not specify the egress interface.
(141817)
•
When you edit a saved search, the previously configured name of the
search does not appear in the Name field; the field is empty. (142060)
•
When the system sends a file for sandbox analysis and the cloud does not
respond within 50 minutes, the file’s status still appears as Sent for Analysis
instead of indicating that analysis has timed out. (142309)
•
When you are using two Defense Centers in a high availability configuration,
you cannot generate troubleshooting reports for a Defense Center from the
web interface of its high availability peer. You must generate
troubleshooting reports directly from the Defense Center you need the
reports for. (142645)
•
When you upgrade a system with an invalid nameserver to Version 5.3.0.2,
the system slows to the point where it is unusable, and system processes
which write to syslog, including Snort, run very slowly. As a workaround,
configure valid nameservers. This bug can be viewed in Bug Navigator
[URL:
https://tools.cisco.com/bugsearch/
]. (CSCur59598)
Known Issues Reported in Previous Releases
The following is a list of known issues that were reported in previous releases of
the Sourcefire 3D System:
•
If the system generates intrusion events with a Destination Port/ICMP Code of
0
, the Top 10 Destination Ports section of the Intrusion Event Statistics page
(Overview > Summary > Intrusion Event Statistics) omits port numbers from the
display. (125581)
•
Defense Center local configurations (System > Local > Configuration) are not
synchronized between high availability peers. You must edit and apply the
changes on all Defense Centers, not just the primary. (130612, 130652)
•
In some cases, large system backups may fail if disk space usage exceeds
the disk space threshold before the system begins pruning. (132501)
•
In some cases, using the RunQuery tool to execute
a SHOW TABLES
command may cause the query to fail. To avoid query failure, only run this
query interactively using the RunQuery application. (132685)
•
If you reboot a Series 3 managed device after a Sourcefire 3D System
update fails, subsequent updates may fail even after you resolve the original
issue. (132700)
•
If you delete a previously-imported local intrusion rule, you cannot re-import
the deleted rule. (132865)