Cisco Cisco Firepower Management Center 2000 릴리즈 노트
49
FireSIGHT System Release Notes
For Assistance
If you Create Email Alert on the Alerts page (Policies > Actions > Alerts) and enable the Retrospective Events configuration option
on the Advanced Malware Protection Alerts tab, then save and apply, the system generates truncated emails when the alert is triggered
when the emails should not be. (CSCuy49371)
on the Advanced Malware Protection Alerts tab, then save and apply, the system generates truncated emails when the alert is triggered
when the emails should not be. (CSCuy49371)
In some cases, if you enable the use of a proxy on the Defense Center and submit captured files to the Cisco cloud for dynamic analysis,
the system generates a Dynamic Analysis Failed (Network Issue) error and does not successfully submit the files for analysis.
(CSCuy49613)
the system generates a Dynamic Analysis Failed (Network Issue) error and does not successfully submit the files for analysis.
(CSCuy49613)
If you configure a manager on a Series 3 device and register the device to a Defense Center, then configure a second manager to the
same Series 3 device, the second manager is successfully configured when it should not be and the device generates a This sensor is
already managed warning. (CSCuy51043)
same Series 3 device, the second manager is successfully configured when it should not be and the device generates a This sensor is
already managed warning. (CSCuy51043)
In some cases, if you backup the system or files to a remote server via SCP and the connection to the remote server experiences latency,
the backup fails. (CSCuy56306)
the backup fails. (CSCuy56306)
In some cases, access control rules were not working for web applications and URLs that are SPDY-enabled. (CSCuy65157)
If you configure OSPF and create or edit a virtual router on the Interfaces tab of the Device Management page (Devices > Device
Management) to include an interface that is not currently active, the managed device incorrectly reports the interface is up when it is
not. (CSCuy64096)
Management) to include an interface that is not currently active, the managed device incorrectly reports the interface is up when it is
not. (CSCuy64096)
If you update a Series 3 device with inline sets to bypass mode from Version 5.4.0 to Version 5.4.02 or later and reboot the device after
the update completes, the device experiences loss of link on sensing interfaces for extended period of time. (CSCuy74958)
the update completes, the device experiences loss of link on sensing interfaces for extended period of time. (CSCuy74958)
In some cases, if you allow cloud communications enable both Enable URL Filtering and Query Cloud for Unknown URLs on the
Cloud Services page (Configuration > ASA FirePOWER Configuration > Local > Configuration > Cloud Service) on an ASA
Firepower device managed by ASDM and the device requests a URL lookup for an unknown URL, the system does not assign a
category when it should. (CSCuy79984)
Cloud Services page (Configuration > ASA FirePOWER Configuration > Local > Configuration > Cloud Service) on an ASA
Firepower device managed by ASDM and the device requests a URL lookup for an unknown URL, the system does not assign a
category when it should. (CSCuy79984)
The backup and restoration feature does not backup user login or user logout activity. (CSCuy87658)
In some cases, if you create routed interfaces in the Interfaces tab of the Device Management page (Devices > Device Management)
and edit the Ipv6 address assigned to routed interface configuration multiple times, applying configuration changes eventually fails.
As a workaround, set the interface to none and apply changes, then assign the IPv6 address to the recreated routed interface and save.
(CSCuy89243)
and edit the Ipv6 address assigned to routed interface configuration multiple times, applying configuration changes eventually fails.
As a workaround, set the interface to none and apply changes, then assign the IPv6 address to the recreated routed interface and save.
(CSCuy89243)
In some cases, if you update a managed Series 3 or Cisco ASA with FirePOWER Services to Version 5.4.0.5 or later, the update fails
even though the Defense Center displays the update successful. If you experience issues after updating a Series 3 or Cisco ASA with
FirePOWER Services to Version 5.4.0.5 or later, contact Support. (CSCuy94873)
even though the Defense Center displays the update successful. If you experience issues after updating a Series 3 or Cisco ASA with
FirePOWER Services to Version 5.4.0.5 or later, contact Support. (CSCuy94873)
If you schedule a task on the Scheduling page (System > Tools > Scheduling) for 12:30 AM, the web interface incorrectly displays
the scheduled time as 12:00 AM even though the task will occur at the configured time. (CSCuz06444)
the scheduled time as 12:00 AM even though the task will occur at the configured time. (CSCuz06444)
In some cases, troubleshoot generation fails on a device with high quantities of files stored from a file inspection policy. (CSCuz13054)
In some cases, if you apply an access control policy with connection logging enabled and create a search from the Connection Events
page (Analysis > Connections > Connection Events) for a Traffic (KB) field value, the system returns incorrect results.
(CSCuz22965)
page (Analysis > Connections > Connection Events) for a Traffic (KB) field value, the system returns incorrect results.
(CSCuz22965)
If you create a correlation rule based on a malware event and include a filename containing a space as a condition, the system saves
the correlation rule but you cannot edit the rule after the initial save. As a workaround, if you include a filename as a condition for a
correlation rule based on malware events, do not include a space in the filename. (CSCuz23093)
the correlation rule but you cannot edit the rule after the initial save. As a workaround, if you include a filename as a condition for a
correlation rule based on malware events, do not include a space in the filename. (CSCuz23093)
In some cases, the system experiences issues if the Automated application Bypass (AAB) is activated and policy apply fails. As a
workaround, restart the device and increase the AAB timeout value, then reapply policy. (CSCuz52270, CSCuy56781)
workaround, restart the device and increase the AAB timeout value, then reapply policy. (CSCuz52270, CSCuy56781)
For Assistance
Thank you for choosing the FireSIGHT System.