Cisco Cisco Firepower Management Center 4000

Page of 1844
 
53-26
FireSIGHT System User Guide
 
Chapter 53      Updating System Software 
  Updating the Geolocation Database
Step 2
From the 
Table
 drop-down list, select 
Rule Update Import Log
.
The page reloads with the appropriate constraints.
Tip
You can also click 
Search 
on the Rule Update Log detailed view; see 
.
Step 3
Optionally, if you want to save the search, enter a name for the search in the 
Name
 field.
If you do not enter a name, the web interface automatically creates one when you save it.
Step 4
Enter your search criteria in the appropriate fields, as described in the 
 table. If you enter multiple criteria, the search returns the records that match all the criteria.
Step 5
If you want to save the search so that other users can access it, clear the 
Save As Private
 check box. 
Otherwise, leave the check box selected to save the search as private. 
If you want to use the search as a data restriction for a custom user role, you must save it as a private 
search.
Step 6
You have the following options:
  •
Click 
Search
 to start the search.
Your search results appear in the default Rule Update Import Log detailed view workflow. To use a 
different workflow, including a custom workflow, click 
(switch workflows)
. For information on 
specifying a different default workflow, see 
  •
Click 
Save
 if you are modifying an existing search and want to save your changes.
  •
Click 
Save as New Search
 to save the search criteria. The search is saved (and associated with your 
user account if you selected 
Save As Private
) so that you can run it at a later time.
Updating the Geolocation Database
License: 
FireSIGHT
Supported Defense Centers: 
Any except DC500
The Cisco Geolocation Database (GeoDB) is a database of geographical data (such as country, city, 
coordinates, and so on) and connection-related data (such as internet service provider, domain name, 
connection type, and so on) associated with routable IP addresses. When your system detects GeoDB 
information that matches a detected IP address, you can view the geolocation information associated 
with that IP address. You must install the GeoDB on your system to view any geolocation details other 
than country or continent. Cisco issues periodic updates to the GeoDB.
To update the GeoDB, use the Geolocation Updates page (
System > Updates > Geolocation Updates
) on the 
Defense Center. When you upload GeoDB updates you obtained from Support or from your appliance, 
they appear on this page.
Time needed to update the GeoDB depends on your appliance; the installation usually takes 30 to 40 
minutes. Although a GeoDB update does not interrupt any other system functions (including the ongoing 
collection of geolocation information), the update does consume system resources while it completes. 
Consider this when planning your updates.