Cisco Cisco Firepower Management Center 4000 Release Notes

Page of 45
Version 5.2.0.6
Sourcefire 3D System Release Notes
8
Updating Your Appliances
Installation Method
Use the Defense Center’s web interface to perform the update. Update the 
Defense Center first, then use it to update the devices it manages.
Although you can install a managed device update from its local web interface, 
Sourcefire strongly recommends using the Defense Center, especially for older or 
less powerful managed device models.
Order of Installation
Update your Defense Centers before you update the devices they manage.
Installing the Update on Paired Defense Centers
When you begin to update one Defense Center in a high availability pair, the other 
Defense Center in the pair becomes the primary, if it is not already. In addition, 
the paired Defense Centers stop sharing configuration information; paired 
Defense Centers do not receive software updates as part of the regular 
synchronization process.
To ensure continuity of operations, do not update paired Defense Centers at the 
same time. First, complete the update procedure for the secondary Defense 
Center, then update the primary Defense Center.
Installing the Update on Clustered Devices
When you install an update on clustered devices, the system performs the 
update on the devices one at a time. When the update starts, the system first 
applies it to the secondary device, which goes into maintenance mode until any 
necessary processes restart and the device is processing traffic again. The 
system then applies the update to the primary device, which follows the same 
process.
Installing the Update on Stacked Devices
When you install an update on stacked devices, the system performs the updates 
simultaneously. Each device resumes normal operation when the update 
completes. Note that:
If the primary device completes the update before all of the secondary 
devices, the stack operates in a limited, mixed-version state until all devices 
have completed the update. 
If the primary device completes the upgrade after all of the secondary 
devices, the stack resumes normal operation when the update completes 
on the primary device.
Installing the Update on Clustered Stacks
When you install an update on a clustered stack, the system performs the update 
one stack at a time. When the update starts, the system first applies it to the