Cisco Cisco Firepower Management Center 2000

Firepower System Release Notes

Installing the Update

miss lookup

option in the General advanced settings of the access control policy (

Policies > Access Control > Access

Control > edit policy > Advanced > edit General Settings

). Note that this option is enabled and URL retry is allowed by

default.

Updating Managed Devices and ASA FirePOWER Modules via the
Firepower Management Center

After you update your Firepower Management Centers to Version 6.0.0.1, use them to update the devices they
manage.

You must use a Firepower Management Center running Version 6.0 to update any managed device that does not
have its own web interface. For ASA FirePOWER modules running on the ASA 5506-X, ASA 5506H-X, ASA
5506W-X, ASA 5508-X, or ASA 5516-X, you can update the module using the Firepower Management Center or
connect to the ASA device and update the ASA FirePOWER module using local management via ASDM. For more
information, see

Updating Managed Devices and ASA FirePOWER Modules via the Firepower Management

Center, page 18

Updating ASA FirePOWER modules Managed by ASDM, page 20

respectively.

Updating managed devices is a two-step process. First, download the update from the Support site and upload
it to the managing Firepower Management Center. Next, install the software. You can update multiple devices at
once, but only if they use the same update file.

For the Version 6.0.0.1 update, all devices reboot. 7000 Series and 8000 Series devices do not perform traffic
inspection, switching, routing, NAT, VPN, or related functions during the update. Depending on how your devices
are configured and deployed, the update process may also affect traffic flow and link state. For more information,
see

Traffic Flow and Inspection During the Update, page 10

Caution:

Before you update a managed device, use its managing Firepower Management Center to redeploy

your configuration to the managed device. Otherwise, the managed device update may fail.

Caution:

Do not reboot or shut down your appliances during the update until after you see the login prompt.

The system may appear inactive during the pre-checks portion of the update; this is expected behavior and
does not require you to reboot or shut down your appliances.

To update managed devices and ASA FirePOWER modules:

Step 1

Read these release notes and complete any required pre-update tasks.

For more information, see

Before You Begin: Important Update and Compatibility Notes, page 9

Step 2

Update the software on the devices’ managing Firepower Management Center; see

Updating Firepower

Management Centers, page 15

Step 3

Download the update from the Support site:



for 7000 Series and 8000 Series managed devices:

Sourcefire_3D_Device_S3_Patch-6.0.0.1-26.sh



for ASA FirePOWER modules:

Cisco_Network_Sensor_Patch-6.0.0.1-26.sh



for NGIPSv (virtual managed devices):

Sourcefire_3D_Device_Virtual64_VMware_Patch-6.0.0.1-26.sh

Note:

Download the update directly from the Support site. If you transfer an update file by email, it may become

corrupted.