Cisco Cisco Firepower Management Center 4000

Any

You can import rule updates on a daily, weekly, or monthly basis, using the Rule Updates page. If your 
FireSIGHT Systemdeployment includes two Defense Centers configured as a high availability pair, you 
only need to update rules on one of the Defense Centers. The second Defense Center receives the rule 
update as part of the regular synchronization process.

Admin

Select 

, then select the 

 tab.

The Rule Updates page appears.

You can also click 

 on the Rule Editor page, which you access by selecting 

.

Optionally, click 

, then click 

 to move all user-defined rules that you have created 

or imported to the deleted folder. See 

 for more information.

Select 

.

The page expands to display options for configuring recurring imports.

Import status messages appear beneath the 

 section heading. Recurring 

imports are enabled when you save your settings.

To disable recurring imports, clear the 

 check box and click 

.

In the 

 field, select 

, 

, or 

 from the drop-down list.

You can select from a recurring task drop-down list either by clicking on your selection or by typing the 
first letter or number in the selection one or more times and pressing Enter.

If you selected 

 in the 

 field, use the drop-down list that appears to select the day 

of the week when you want to import rule updates.

If you selected 

 in the 

 field, use the drop-down list that appears to select the day 

of the month when you want to import rule updates.

In the 

 field, specify the time when you want to start your recurring rule update import.

Optionally, select 

 to automatically reapply 

intrusion policies currently applied from this appliance when the rule update import completes.

Note that you cannot apply intrusion policies to stacked devices that are running different versions of 
the FireSIGHT System (for example, if an upgrade on one of the devices fails). See 

 for more information.

Click 

 to enable recurring rule update imports using your settings.

The status message under the Recurring Rule Update Imports section heading changes to indicate that 
the rule update has not yet run.