Cisco Cisco Firepower Management Center 4000 Release Notes

Version 5.3.0.2

Sourcefire 3D System Release Notes

17

Uninstalling the Update

Planning the Uninstallation

Before you uninstall the update, you must thoroughly read and understand the 

following sections.

Uninstallation Method

You must uninstall updates locally. You cannot use a Defense Center to uninstall 

the update from a managed device.
For all physical appliances and virtual Defense Centers, uninstall the update using 

the local web interface. Because virtual managed devices and Sourcefire 

Software for X-Series do not have a web interface, you must use the bash shell to 

uninstall the update.

Order of Uninstallation

Uninstall the update in the reverse order that you installed it. That is, first uninstall 

the update from managed devices, then from Defense Centers.

Uninstalling the Update from Clustered or Paired Appliances

Clustered devices and Defense Centers in high availability pairs must run the 

same version of the Sourcefire 3D System. Although the uninstallation process 

triggers an automatic failover, appliances in mismatched pairs or clusters do not 

share configuration information, nor do they install or uninstall updates as part of 

their synchronization. If you need to uninstall an update from redundant 

appliances, plan to perform the uninstallations in immediate succession.
To ensure continuity of operations, uninstall the update from clustered devices 

and paired Defense Centers one at a time. First, uninstall the update from the 

secondary appliance. Wait until the uninstallation process completes, then 

immediately uninstall the update from the primary appliance.

If the uninstallation process on a clustered device or paired Defense 

Center fails, do not restart the uninstall or change configurations on its peer. 

Instead, contact Support.

Uninstalling the Update from Stacked Devices

All devices in a stack must run the same version of the Sourcefire 3D System. 

Uninstalling the update from any of the stacked devices causes the devices in 

that stack to enter a limited, mixed-version state. 
To minimize impact on your deployment, Sourcefire recommends that you 

uninstall an update from stacked devices simultaneously. The stack resumes 

normal operation when the uninstallation completes on all devices in the stack.