Cisco Cisco Firepower Management Center 2000

Firepower System Release Notes

Resolved Issues

 



Resolved an issue where, if you created an access control policy configured with a 

 or 

 

action on Cisco ASA FirePOWER module running on a Firepower Threat Defense, the client did not always 
display the block page when it should. (CSCuu23884)



Resolved an issue where the system experienced latency if you created a link aggregation group (LAG) on a 
Firepower 7000 Series or 8000 Series device when connected to a Cisco Nexus 7000 switch. (CSCuu31626)



Resolved an issue where, if you changed your system's time zone to a UTC+ zone and added a correlation 
rule with at least one inactive period to a correlation policy, activating the correlation rule failed. (CSCuu37600)



Resolved an issue where you experienced connectivity issues if you created a routed interface on your 
clustered Firepower 7000 Series or 8000 Series device (known as high availability in Version 6.0). 
(CSCuu37668)



Resolved an issue where the Cisco Redundancy Protocol (SFRP) router advertisement value appeared to be 
configurable when you added or edited a routed IP address when it was not. (CSCuu37687)



Resolved an issue where, if you enabled two or more management interfaces and web client lost connectivity 
to one of the interfaces, the system defaulted to an incorrect gateway IP address and you could not access 
the interface. (CSCuu44020)



Resolved an issue where, if you created an access control policy with a geolocation condition, traffic that 
should have matched the condition did not. (CSCuu48800)



Improved network map generation. (CSCuu53215, CSCuu94784, CSCuv72386, CSCuw06359)



Improved load time for access control rules with manual URL conditions referenced in an access control policy. 
(CSCuu55853)



Resolved an issue where Cisco ASA with FirePOWER Services (ASA 5506-X, ASA 5506H-X, ASA 5506W-X, 
ASA 5508-X, and ASA 5516-X) running the minimum ASA version 9.3.2.2 or later did not enforce the 
mpf-policy-map-class mode. (CSCuu68273)



Resolved an issue where creating a search for an intrusion event with an original client IP using a negated 
subnet IP address caused the system to incorrectly exclude intrusion events with no original client IP. 
(CSCuu68438)



Resolved an issue where, in rare cases, the system appeared unstable and did not recover from a reboot. 
(CSCuu93154)



Resolved an issue where a drive failure on some DC4000 appliances caused RAID controller failure and data 
loss. (CSCuu93159)



Improved eStreamer performance. (CSCuu94902)



Resolved an issue where the system did not display the correct number of bytes in the Top Web Applications 
Seen and Top Client Applications Seen widgets on the Summary Dashboard if you viewed high-volume media 
such as video streaming on your web browser. (CSCuu97036)



Resolved an issue where, if you deployed an SSL policy set to 

 on a managed device, the 

decrypted traffic that egressed from one interface set switched or routed so the traffic ingressed into a 
different interface set on the same managed device and the system experienced a disruption in SSL traffic. 
(CSCuu97712)



Resolved an issue where the 

check box on the Report Templates tab of the Reporting page did not 

stay selected and you stopped receiving reports via email if you generated a report, navigated away from the 
Report Templates tab, and then generated another report. (CSCuu97750, CSCuu41580, CSCuv43116)



Resolved an issue where clicking 

 on interactive block web page did not always redirect you to the 

blocked web page. (CSCuu97934, CSCuu97946)



Resolved an issue where, in some cases, updating failed. (CSCuu99337)



Resolved an issue where the system did not acknowledge users as members of their primary LDAP groups. 
(CSCuv03821)