Cisco Cisco Firepower Management Center 4000 Release Notes

Page of 37
Version 5.2.0.1
Sourcefire 3D System Release Notes
13
Updating Your Appliances
7. Select the devices where you want to install the update.
If you are updating a stacked pair, selecting one member of the pair 
automatically selects the other. You must update members of a stacked pair 
together.
8. Click Install. Confirm that you want to install the update and reboot the 
devices.
The update process begins. You can monitor the update's progress in the 
Defense Center’s task queue (System > Monitoring > Task Status).
WARNING!
If you encounter issues with the update (for example, if the task 
queue indicates that the update has failed or if a manual refresh of the task 
queue shows no progress for several minutes), do not restart the update. 
Instead, contact Support.
9. Select Devices > Device Management and confirm that the devices you updated 
have the correct software version: Version 5.2.0.1.
10. Verify that the appliances in your deployment are successfully communicating 
and that there are no issues reported by the health monitor.
11. Reapply device configurations to all managed devices.
TIP!
To reactivate a grayed-out Apply button, edit any interface in the device 
configuration, then click Save without making changes.
12. Reapply access control policies to all managed devices.
Applying an access control policy may cause a short pause in traffic flow and 
processing, and may also cause a few packets to pass uninspected. For more 
information, see the Sourcefire 3D System User Guide.
Using the Shell to Perform the Update
Although Sourcefire recommends that you use the web interface on your 
Defense Centers to perform updates, there may be rare situations where you 
need to update the appliance using the bash shell.
IMPORTANT!
Do not use the shell to update a fresh, unconfigured (Version 5.2) 
installation of the Sourcefire 3D System. Before you update an appliance using 
the shell, make sure that you complete its initial setup using its web interface. 
For the Version 5.2.0.1 update, Series 3 managed devices reboot. Managed 
devices do not perform traffic inspection, switching, routing, NAT, VPN, or related 
functions during the update. Depending on how your devices are configured and 
deployed, the update process may also affect traffic flow and link state. For more