Cisco Cisco Firepower Management Center 4000 Release Notes

Page of 42
Version 5.2.0.5
Sourcefire 3D System Release Notes
3
Before You Begin: Important Update and Compatibility Notes
Configuration and Event Backup Guidelines
Before you begin the update, Sourcefire strongly recommends that you back up 
current event and configuration data to an external location. This data is not 
backed up as part of the update process.
Use the Defense Center to back up event and configuration data for itself and the 
devices it manages. For more information on the backup and restore feature, see 
the Sourcefire 3D System User Guide.
IMPORTANT!
The Defense Center purges backups from previous updates. To 
retain archived backups, store the backups externally.
Traffic Flow and Inspection During the Update
The update process (and any uninstallation of the update) reboots all appliances. 
Depending on how your devices are configured and deployed, the following 
capabilities are affected:
traffic inspection, including application awareness and control, URL filtering, 
Security Intelligence, intrusion detection and prevention, and connection 
logging 
traffic flow, including switching, routing, NAT, VPN, and related functionality
link state
Note that when you update clustered or stacked devices, the system performs 
the update one device or stack at a time to avoid traffic interruption.
Traffic Inspection and Link State
In an inline deployment, your managed devices (depending on model) can affect 
traffic flow via application control, user control, URL filtering, Security 
Intelligence, and intrusion prevention, as well as switching, routing, NAT, and 
VPN. In a passive deployment, you can perform intrusion detection and collect 
discovery data without affecting network traffic flow. For more information on 
appliance capabilities, see the Sourcefire 3D System Installation Guide.
The following table provides details on how traffic flow, inspection, and link state 
are affected during the update, depending on your deployment. Note that