Cisco SSL Appliance 2000 Guide De Montage

Version 3.6

Sourcefire SSL Appliance Release Notes

 5

Updating Existing Appliances and Software Sensors

•

Supports auto-update of BIOS/BMC on Pegasus chassis.

•

Fixed handling of retransmits to resolve "internal errors".

•

Does not bypass the ruleset for undecryptable sessions. 

•

Less stringent SSLv2 ClientHello checks to fix SSL detection.

•

Fixes issues when IE8 was used to connect to appliance UI.

•

Includes qdesc information in diagnostics.

•

Fixes potential crash in control daemon, related to firmware version 

checking.

•

Fixes retries on platform interface calls.

•

Fixes issues with TCP windows and unique IP IDs.

•

Added timeouts and rate-limiting on early ACKs.

•

Disables early ACKs as soon as a TCP RST is seen on the wire.

•

Fixes ruleset issue when session has invalid certificate handle.

•

Fixes lockup in DN parsing.

•

Fixes sslcli unfail option.

•

Does not allow cancel of update if already canceled.

•

Retries UI call on role expiry.

•

Allows cancel on rescue updates.

•

Fixes to TCP inline library gap detection (to resolve stalls on large 

downloads).

•

Turns off GRE/MPLS support (unsupported in host code).

•

Fixes password check wordlist (uses correct wordlist package).

•

Fixes issues in end-of-flow handling.

•

Fixes handling of TCP window updates advertised in TCP ACK packets.

Updating Existing Appliances and Software Sensors

There are three methods for updating your SSL appliance from Version 3.6.x to 

3.6.3. You can use a patch, which requires downloading and updating two files on 

the SSL appliance, or you can use an image on a USB stick, which requires 

building a bootable USB stick. 
The following sections help you prepare for and install the Version 3.6.3 update on 

your existing SSL appliances:

•

•

•

•