Cisco Cisco Firepower Management Center 4000 Release Notes
Version 5.2.0.3
Sourcefire 3D System Release Notes
7
Updating Your Appliances
You can use the Defense Center to back up event and configuration data for itself
and the devices it manages. For more information on the backup and restore
feature, see the Sourcefire 3D System User Guide.
IMPORTANT!
Sourcefire does not support updating or reimaging appliances with
more than one hard drive. You must remove additional hard drives before
beginning the update.
When to Perform the Update
Because the update process may affect traffic inspection, traffic flow, and link
state, Sourcefire strongly recommends you perform the update in a
maintenance window or at a time when the interruption will have the least impact
on your deployment.
Installation Method
Use the Defense Center’s web interface to perform the update. Update the
Defense Center first, then use it to update the devices it manages.
Although you can install a managed device update from its local web interface,
Although you can install a managed device update from its local web interface,
Sourcefire strongly recommends using the Defense Center, especially for older or
less powerful managed device models.
Order of Installation
Update your Defense Centers before you update the devices they manage.
Installing the Update on Paired Defense Centers
When you begin to update one Defense Center in a high availability pair, the other
Defense Center in the pair becomes the primary, if it is not already. In addition,
the paired Defense Centers stop sharing configuration information; paired
Defense Centers do not receive software updates as part of the regular
synchronization process.
To ensure continuity of operations, do not update paired Defense Centers at the
To ensure continuity of operations, do not update paired Defense Centers at the
same time. First, complete the update procedure for the secondary Defense
Center, then update the primary Defense Center.
Installing the Update on Clustered Devices
When you install an update on clustered devices, the system performs the
update on the devices one at a time. When the update starts, the system first
applies it to the secondary device, which goes into maintenance mode until any
necessary processes restart and the device is processing traffic again. The
system then applies the update to the primary device, which follows the same
process.