Cisco Cisco Firepower Management Center 2000
16
FireSIGHT System Release Notes
Installing the Update
which interrupts traffic inspection. Whether traffic drops during this interruption or passes without further inspection
depends on the model of the managed device and how it handles traffic. For more information, see the Configurations
that Restart the Snort Process section of the FireSIGHT System User Guide.
depends on the model of the managed device and how it handles traffic. For more information, see the Configurations
that Restart the Snort Process section of the FireSIGHT System User Guide.
There are several additional post-update steps you should take to ensure that your deployment is performing properly.
These include:
These include:
verifying that the update succeeded
making sure that all appliances in your deployment are communicating successfully
updating to the latest patch for Version 5.4.1.6, if available, to take advantage of the latest enhancements and
security fixes
security fixes
optionally, updating your intrusion rules and vulnerability database (VDB) and reapplying your access control policies
making any required configuration changes based on the information in
The next sections include detailed instructions not only on performing the update, but also on completing any
post-update steps. Make sure you complete all of the listed tasks.
post-update steps. Make sure you complete all of the listed tasks.
Updating Defense Centers
Use the procedure in this section to update your Defense Centers, including virtual Defense Centers. For the Version
5.4.1.6 update, Defense Centers reboot.
5.4.1.6 update, Defense Centers reboot.
Caution:
You must update your DC2000 and DC4000 BIOs to Version 2.0.1b in order to update your appliances to Version
5.4.1.1 or later. Download the BIOs update via the Cisco Support site.
Caution:
Before you update the Defense Center, reapply access control policies to any managed devices. Otherwise,
the eventual update of the managed device may fail.
Caution:
Do not reboot or shut down your appliances during the update until after you see the login prompt. The system
may appear inactive during the pre-checks portion of the update; this is expected behavior and does not require you to
reboot or shut down your appliances.
reboot or shut down your appliances.
Note:
Updating a Defense Center to Version 5.4.1.6 removes existing uninstallers from the appliance.
To update a Defense Center:
1.
Read these release notes and complete any required pre-update tasks.
For more information, see
.
2.
Download the update from the Support site:
—
for Series 3 and virtual Defense Centers:
Sourcefire_3D_Defense_Center_S3_Upgrade-5.4.1.6-40.sh
Note:
Download the update directly from the Support site. If you transfer an update file by email, it may become
corrupted.
3.
Upload the update to the Defense Center by selecting System > Updates, then clicking Upload Update on the
Product Updates tab. Browse to the update and click Upload.
Product Updates tab. Browse to the update and click Upload.
The update is uploaded to the Defense Center. The web interface shows the type of update you uploaded, its version
number, and the date and time it was generated. The page also indicates whether a reboot is required as part of the
update.
number, and the date and time it was generated. The page also indicates whether a reboot is required as part of the
update.
4.
Make sure that the appliances in your deployment are successfully communicating and that there are no issues
reported by the health monitor.
reported by the health monitor.