Cisco Cisco FirePOWER Appliance 8350

Version 5.2.0.9

Sourcefire 3D System Release Notes

29

Known Issues

In some cases, if you schedule an automatic LDAP user data retrieval, you 

cannot perform on-demand user data retrieval and download. (128962)

In rare cases, automatic application bypass (AAB) activates during network 

discovery policy apply. (129230)

Critical Issue

 After completing an event-only backup, the backup process 

enters an unrecoverable state. Do not attempt an event-only backup. As a 

workaround, back up both configurations and events. (129231)

In some cases, if you view reviewed intrusion events and drill down to the 

packet view, there are no visible events and the reviewed constraint is 

removed. (129257)

In rare cases, installing Version 5.2 or later on a 3D6500 managed device 

may cause system issues. (129561)

In some cases, the system incorrectly identifies SMTP and generates a 

connection event with missing application information if the SMTP server 

responds with a connection error. (130085)

In rare cases, the system may generate critical health alert emails 

containing indecipherable messages. (130518)

In some cases, the system may incorrectly sort values in the Type column or 

omit names from the Security Zones column on the security zones page in 

the object manager. (130569, 130631, 130632)

In some cases, drilling down in a custom workflow may redirect you to the 

incorrect packet view page for an intrusion event. (130620)

In some cases, the system restore boot option does not output to the serial 

port on managed devices even if you selected Physical Serial Port as the 

remote console access option. (130772)

In several places, the documentation incorrectly indicates that you can add 

IP address ranges to network objects. The Sourcefire 3D System currently 

supports adding individual IP addresses or address blocks to network 

objects, not ranges. (130821, 130992)

In some cases, 3D8250, 3D8260, 3D8270, and 3D8290 managed devices 

with 10G or 40G NMSB may experience compatibility issues with 10G 

NFTW NetMods. To be compatible with 10G NFTW Netmods, 10G NMSB 

must be revision 7 or later and 40G NMSB must be revision 8 or later. 

(131189)

In rare cases, the table view of servers (Analysis > Hosts > Servers) may 

duplicate servers and produce inaccurate server counts. (131329)

The eStreamer client omits file policy UUID metadata from type 502 

intrusion events. (131362)

If you schedule multiple simultaneous reporting tasks when using remote 

storage, the system may fail to send all reports to the selected remote 

storage location. As a workaround, schedule report generation tasks in 

30-minute intervals. (131805)