Cisco Cisco Firepower Management Center 4000
53-26
FireSIGHT System User Guide
Chapter 53 Updating System Software
Updating the Geolocation Database
Step 2
From the
Table
drop-down list, select
Rule Update Import Log
.
The page reloads with the appropriate constraints.
Tip
You can also click
Search
on the Rule Update Log detailed view; see
.
Step 3
Optionally, if you want to save the search, enter a name for the search in the
Name
field.
If you do not enter a name, the web interface automatically creates one when you save it.
Step 4
Enter your search criteria in the appropriate fields, as described in the
table. If you enter multiple criteria, the search returns the records that match all the criteria.
Step 5
If you want to save the search so that other users can access it, clear the
Save As Private
check box.
Otherwise, leave the check box selected to save the search as private.
If you want to use the search as a data restriction for a custom user role, you must save it as a private
search.
search.
Step 6
You have the following options:
•
Click
Search
to start the search.
Your search results appear in the default Rule Update Import Log detailed view workflow. To use a
different workflow, including a custom workflow, click
different workflow, including a custom workflow, click
(switch workflows)
. For information on
specifying a different default workflow, see
•
Click
Save
if you are modifying an existing search and want to save your changes.
•
Click
Save as New Search
to save the search criteria. The search is saved (and associated with your
user account if you selected
Save As Private
) so that you can run it at a later time.
Updating the Geolocation Database
License:
FireSIGHT
Supported Defense Centers:
Any except DC500
The Cisco Geolocation Database (GeoDB) is a database of geographical data (such as country, city,
coordinates, and so on) and connection-related data (such as internet service provider, domain name,
connection type, and so on) associated with routable IP addresses. When your system detects GeoDB
information that matches a detected IP address, you can view the geolocation information associated
with that IP address. You must install the GeoDB on your system to view any geolocation details other
than country or continent. Cisco issues periodic updates to the GeoDB.
coordinates, and so on) and connection-related data (such as internet service provider, domain name,
connection type, and so on) associated with routable IP addresses. When your system detects GeoDB
information that matches a detected IP address, you can view the geolocation information associated
with that IP address. You must install the GeoDB on your system to view any geolocation details other
than country or continent. Cisco issues periodic updates to the GeoDB.
To update the GeoDB, use the Geolocation Updates page (
System > Updates > Geolocation Updates
) on the
Defense Center. When you upload GeoDB updates you obtained from Support or from your appliance,
they appear on this page.
they appear on this page.
Time needed to update the GeoDB depends on your appliance; the installation usually takes 30 to 40
minutes. Although a GeoDB update does not interrupt any other system functions (including the ongoing
collection of geolocation information), the update does consume system resources while it completes.
Consider this when planning your updates.
minutes. Although a GeoDB update does not interrupt any other system functions (including the ongoing
collection of geolocation information), the update does consume system resources while it completes.
Consider this when planning your updates.