Cisco Cisco Firepower Management Center 4000

For minor updates, you can monitor the update's progress in the task queue (

).

For major updates, you can begin monitoring the update’s progress in the task queue. However, after 
the Defense Center completes its necessary pre-update checks, you are logged out. When you log 
back in, the Upgrade Status page appears. See 

 

for information.

Regardless of the update type, do not use the web interface to perform tasks other than monitoring the 
update until the update has completed and, if necessary, the Defense Center reboots. For more 
information, see 

.

After the update finishes, if necessary, log into the Defense Center.

If you are the first user to log in after a major update, the End User License Agreement (EULA) may 
appear. You must review and accept the EULA to continue.

Clear your browser cache and force a reload of the browser. Otherwise, the user interface may exhibit 
unexpected behavior.

Select 

 and confirm that the software version is listed correctly. Also note the versions of the 

rule update and VDB on the Defense Center; you will need this information later.

Verify that all managed devices are successfully communicating with the Defense Center.

If the rule update available on the Support Site is newer than the rules on your Defense Center, import 
the newer rules. 

For more information, see 

Reapply access control policies.

Applying an access control policy may cause a short pause in traffic flow and processing, and may also 
cause a few packets to pass uninspected. For more information, see 

If the VDB available on the Support Site is newer than the VDB on your Defense Center, install the latest 
VDB.

Installing a VDB update causes a short pause in traffic flow and processing, and may also cause a few 
packets to pass uninspected. For more information, see 

Continue with the next section, 

, to update Cisco software on the devices that 

the Defense Center manages.

Any

After you update your Defense Centers, Cisco recommends that you use them to update the devices they 
manage. You must use the Defense Center to update managed devices that do not have a web interface, 
such as virtual devices and Sourcefire Software for  X-Series. For major updates to Sourcefire Software 
for  X-Series, you may need to uninstall the previous version and install the new version.

Updating managed devices is a two-step process. First, download the update from either of the following 
Support Sites and upload it to the managing Defense Center: