Cisco Cisco Firepower Management Center 2000
Firepower System Release Notes
Installing the Update
Cisco Identity Services Engine (ISE)
Cisco AMP Threat Grid
Cisco Firepower System User Agent
For more information, see the
Installing the Update
Before you begin the update, you must thoroughly read and understand these release notes, especially
and
.
For minimum Firepower System version requirements, see
. To update your appliances, see the guidelines and procedures outlined below:
Caution:
Do not reboot or shut down your appliances during the update until you see the login prompt. The system
may appear inactive during the pre-checks portion of the update; this is expected behavior and does not require
you to reboot or shut down your appliances.
you to reboot or shut down your appliances.
Note:
Version 6.0 of the Firepower requires more memory than the previous versions for some Firepower Management
Center models (previously referred to as the FireSIGHT Management Center or the Defense Center). To be specific,
MC750 requires two 4GB dual in-line memory modules (DIMM). Similarly, MC1500 with 6GB of memory also requires
additional memory. For more information see
MC750 requires two 4GB dual in-line memory modules (DIMM). Similarly, MC1500 with 6GB of memory also requires
additional memory. For more information see
and the Firepower Management Center Installation Guide.
When to Perform the Update
Because the update process may affect traffic inspection, traffic flow, and link state, Cisco strongly recommends you
perform the update in a maintenance window or at a time when the interruption will have the least impact on your
deployment.
perform the update in a maintenance window or at a time when the interruption will have the least impact on your
deployment.
Installation Method
You
must
install the FireSIGHT System Version 6.0.0 Pre-Installation package prior to updating the Version 6.0. For more
information, see the
Use the Firepower Management Center’s web interface to perform the update. Update the Firepower Management
Center first, then use it to update the devices it manages.
Center first, then use it to update the devices it manages.
Order of Installation
Update your Firepower Management Centers before updating the devices they manage.
Caution:
URL category determination can introduce up to two seconds of delay in packet delivery, depending on
local network conditions. If such delay is not acceptable, URL retry should not be allowed. Note that without URL
retry, URL filtering may not be effective until such time as URL category and reputation determination completes for
each URL. Until that time, packets that would have been filtered based on the URL’s category or reputation will be
filtered based on the Uncategorized category. For more information on preventing URL retry, see
retry, URL filtering may not be effective until such time as URL category and reputation determination completes for
each URL. Until that time, packets that would have been filtered based on the URL’s category or reputation will be
filtered based on the Uncategorized category. For more information on preventing URL retry, see
Installing the Update on Paired Firepower Management Centers
Updating Firepower Management Center in a high availability pair is not supported in Version 6.0. In order to update
Firepower Management Centers in a high availability environment, you must break the pair and update each Firepower
Management Center individually.In order to update to Version 6.0, you must break the high availability pair.
Firepower Management Centers in a high availability environment, you must break the pair and update each Firepower
Management Center individually.In order to update to Version 6.0, you must break the high availability pair.