Cisco Cisco Firepower Management Center 4000
53-17
FireSIGHT System User Guide
Chapter 53 Updating System Software
Importing Rule Updates and Local Rule Files
If you did not select
Reapply intrusion policies after the Rule Update import completes
, changes in the rule
update are not implemented until the next time you apply the affected intrusion policies. See
for more information.
Note
Contact Support if you receive an error message while installing the rule update.
Using Automatic One-Time Rule Updates
License:
Any
The following procedure explains how to import a new rule update by automatically connecting to the
Support Site. You can use this procedure only if the appliance has Internet access.
Support Site. You can use this procedure only if the appliance has Internet access.
To automatically import a rule update:
Access:
Admin
Step 1
Select
System > Updates
, then select the
Rule Updates
tab.
The Rule Updates page appears.
Tip
You can also click
Import Rules
on the Rule Editor page, which you access by selecting
Policies > Intrusion
> Rule Editor
.
Step 2
Optionally, click
Delete All Local Rules
, then click
OK
to move all user-defined rules that you have created
or imported to the deleted folder. See
for more information.
Step 3
Select
Download new Rule Update from the Support Site
.
Step 4
Optionally, select
Reapply intrusion policies after the Rule Update import completes
to automatically reapply
intrusion policies currently applied from this appliance when the rule update completes.
Note that you cannot apply intrusion policies to stacked devices that are running different versions of
the FireSIGHT System (for example, if an upgrade on one of the devices fails). See
the FireSIGHT System (for example, if an upgrade on one of the devices fails). See
for more information.
Step 5
Click
Import
.
The rule update is installed and the system displays the Rule Update Log detailed view workflow. See
for more information.
If you selected
Reapply intrusion policies after the Rule Update import completes
, the system applies
only the intrusion policies in the currently applied access control policy but does not apply the access
control policy. See
control policy. See
for more information.
If you did not select
Reapply intrusion policies after the Rule Update import completes
, changes in the rule
update are not implemented until the next time you apply the affected intrusion policies. See
for more information.
Note
Contact Support if you receive an error message while installing the rule update.