Cisco Cisco FirePOWER Appliance 7010 Notas de publicación
Version 5.2.0.3
Sourcefire 3D System Release Notes
31
Known Issues
•
In some cases, the system restore boot option does not output to the serial
port on managed devices even if you selected Physical Serial Port as the
remote console access option. (130772)
•
In several places, the documentation incorrectly indicates that you can add
IP address ranges to network objects. The Sourcefire 3D System currently
supports adding individual IP addresses or address blocks to network
objects, not ranges. (130821, 130992)
•
In some cases, 3D8250, 3D8260, 3D8270, and 3D8290 managed devices
with 10G or 40G NMSB may experience compatibility issues with 10G
NFTW NetMods. To be compatible with 10G NFTW Netmods, 10G NMSB
must be revision 7 or later and 40G NMSB must be revision 8 or later.
(131189)
•
In rare cases, the table view of servers (Analysis > Hosts > Servers) may
duplicate servers and produce inaccurate server counts. (131329)
•
The eStreamer client omits file policy UUID metadata from type 502
intrusion events. (131362)
•
In some cases, NAT rule validation fails if you configure a static NAT rule
with an original destination network that matches the translated source
network on a dynamic NAT rule in the same policy. (131490)
•
If you schedule multiple simultaneous reporting tasks when using remote
storage, the system may fail to send all reports to the selected remote
storage location. As a workaround, schedule report generation tasks in
30-minute intervals. (131805)
•
Sourcefire documentation does not reflect that you must disable Spanning
Tree Protocol (STP) on any third-party switching equipment connected to a
device’s management interface before connecting to a Series 3 appliance
using LOM/SOL. (132488)
Known Issues Discovered in Previous Releases
The following is a list of known issues that were discovered in previous releases
of the Sourcefire 3D System:
•
You must use the Defense Center’s web interface to unregister a managed
device. If you unregister a device using either the device’s web interface or
its command line interface (CLI), it is not removed from the Defense Center.
(112659)
•
The system will generate a health alert if the Defense Center is unable to
connect to the Sourcefire cloud. To troubleshoot, ensure the connection
from the Defense Center to the Sourcefire cloud (
54.243.248.19
and
54.243.248.162
) on port 32137 is working properly. (112708)
•
If multiple files are attached to a single email, the system may incorrectly
identify files after the first. (114523)
•
If you attempt to create multiple static NAT rules with the same original
values, the system may experience issues with traffic mapping. (116148)