Cisco Cisco Firepower Management Center 4000

Any

The following procedure explains how to import a new rule update manually. This procedure is 
especially useful if your Defense Center does not have Internet access.

Admin

From a computer that can access the Internet, access either of the following Support Sites:

 (http://www.cisco.com/cisco/web/support/index.html)

Click 

, then click 

.

Navigate to the latest rule update.

Rule updates are cumulative, so the newest rule update contains the intrusion rules and new features of 
all previous rule updates. You cannot import a rule update with a version number lower than the version 
of the currently installed update.

Click the rule update file that you want to download and save it to your computer.

Log into your appliance’s web interface.

Select 

, then select the 

 tab.

The Rule Updates page appears.

You can also click 

 on the Rule Editor page, which you access by selecting 

.

Optionally, click 

, then click 

 to move all user-defined rules that you have created 

or imported to the deleted folder. See 

 for more information.

Select 

 and click 

 to navigate to and select the rule 

update file.

Optionally, select 

 to automatically reapply 

intrusion policies currently applied from this appliance when the rule update import completes.

Note that you cannot apply access control policies to stacked devices that are running different versions 
of the FireSIGHT System (for example, if an upgrade on one of the devices fails). See 

 for more information.

Click 

.

The rule update is installed and the system displays the Rule Update Log detailed view. See 

 for more information.

If you selected 

 in step 

, the system applies 

only the intrusion policies in the currently applied access control policy but does not apply the access 
control policy. See 

 for more information.