Cisco Cisco Firepower Management Center 4000 Release Notes

Version 5.3.0.2

Sourcefire 3D System Release Notes

29

Issues Resolved in Version 5.3.0.2

Resolved an issue where if you disabled user detection in LDAP traffic using 

your network discovery policy, the Defense Center stopped logging User 

Agent login data. (128741)

Resolved an issue where, in some cases, you could not perform on-demand 

user data retrieval and download if you scheduled automatic LDAP user data 

retrieval. (128962)

Security Issue 

Resolved multiple XSS vulnerabilities in the object manager 

and rule editor. (129052, 132023)

Resolved an issue where, in some cases, if you viewed reviewed intrusion 

events and drilled down to the packet view, there were no visible events 

and the reviewed constraint was removed. (129257)

Resolved an issue where, in some cases, the system incorrectly identified 

SMTP traffic and generated a connection event with missing application 

information if the SMTP server responded with a connection error. (130085)

Resolved an access control policy synchronization issue on Defense 

Centers in a high availability configuration. (130475)

Resolved an issue where, in rare cases, the system generated critical health 

alert emails containing indecipherable messages. (130518)

Resolved multiple display issues on the security zones page in the object 

manager. (130569, 130631, 130632)

Resolved an issue where drilling down in a custom workflow redirected you 

to the incorrect packet view page for an intrusion event. (130620)

Resolved an issue where, in some cases, the system restore boot option 

did not output to the serial port on managed devices even if you selected 

Physical Serial Port as the remote console access option. (130772)

Improved the stability of clustered managed devices when failing over after 

a hardware failure. (130811, 130812, 131031, 133088, 130602)

Resolved a failover synchronization issue on clustered managed devices. 

(130829)

Improved the system's malware analysis and blocking capabilities when 

handling file transfer protocol (FTP) traffic. (130888, 133134)

Resolved an issue where, in rare cases, the intrusion policy page failed to 

display. (131181)

Resolved an issue where, in rare cases, the table view of servers (Analysis > 

Hosts > Servers) duplicated servers and produced inaccurate server counts. 

(131329)

Resolved an issue where, in some cases, if you configured static routes as 

described in KB article 000001950 and made a subsequent change to the 

network configuration, the system dropped the static routes until after the 

next system reboot. (131646)

Improved the stability of stacking three managed devices in a Tri-Stack. 

(131836, 131896)