Cisco Cisco Firepower Management Center 2000
3
FireSIGHT System Release Notes
New Features and Functionality
Tip:
Cisco documentation may refer to the Defense Center as the FireSIGHT Management Center. The Defense Center and the FireSIGHT
Management Center are the same appliance.
Changed Functionality
The following functionality is changed for Version 5.4.0.6 and Version 5.4.1.5:
If the system detects a URL and cannot categorize the requested URL from prior lookup results, the system attempts a secondary URL
lookup method. If the URL cannot be categorized within two seconds using the secondary URL lookup method, the system assigns the
URL the Uncategorized category and processes the URL.
lookup method. If the URL cannot be categorized within two seconds using the secondary URL lookup method, the system assigns the
URL the Uncategorized category and processes the URL.
The SMTP preprocessor now generates an alert for multi-line authentication command overflow attempts.
The system now restricts reassembly of packets once the system reaches the max HTTP server flow depth and decreases latency in
traffic processing.
traffic processing.
Features and Functionality Introduced in Previous Versions
Version 5.4.1.1
Dedicated AMP Appliances
Version 5.4 introduces a new Series 3 FirePOWER managed devices designed with additional processing power to maximize the
performance of the FireSIGHT System’s AMP features. The AMP8050 is a 81xx Family device with support for Netmods and includes the
additional storage necessary to function as a dedicated AMP appliance. The AMP8350 is an 83xx Family device also with support for
Netmods and the additional storage required for AMP functionality. The AMP8350 model can be used as a stacked unit with the AMP8360,
AMP8370, and AMP8390, for 2, 3, and 4 stacks, respectively.
performance of the FireSIGHT System’s AMP features. The AMP8050 is a 81xx Family device with support for Netmods and includes the
additional storage necessary to function as a dedicated AMP appliance. The AMP8350 is an 83xx Family device also with support for
Netmods and the additional storage required for AMP functionality. The AMP8350 model can be used as a stacked unit with the AMP8360,
AMP8370, and AMP8390, for 2, 3, and 4 stacks, respectively.
Version 5.4.1:
FirePOWER Services Management Capabilities
Centralized Management of Cisco ASA5506-X with FirePOWER Services
The Defense Center is now able to manage FirePOWER Services (ASA FirePOWER devices) implementations running on ASA5506-X
devices in the same way it does on all of the other ASA5500-X devices. This enables the management of multiple ASA5506-X devices
running ASA FirePOWER devices from a single Defense Center, as long as the ASA platform is running Version 9.3.2.2 or later and the
ASA FirePOWER device is running Version 5.4.1 or later. Administrators will be able to configure intrusion detection and prevention
devices in the same way it does on all of the other ASA5500-X devices. This enables the management of multiple ASA5506-X devices
running ASA FirePOWER devices from a single Defense Center, as long as the ASA platform is running Version 9.3.2.2 or later and the
ASA FirePOWER device is running Version 5.4.1 or later. Administrators will be able to configure intrusion detection and prevention
Cisco ASA with FirePOWER Services
Refers to ASA devices with the ASA FirePOWER module installed
ASA FirePOWER module
Refers to the hardware and software modules installed on compatible ASA devices
ASA software
Refers to the base software installed on Cisco ASA devices
Adaptive Security Device Management
(ASDM)
(ASDM)
Refers to the Adaptive Security Device Manager used to manage ASA functionality
Direct management
Refers to management of the ASA FirePOWER module on the ASA5506-X using ASDM
Centralized management
Refers to management of the ASA FirePOWER module on the ASA5506-X using a
FireSIGHT Defense Center
FireSIGHT Defense Center
Table 1
Changes to Terminology (continued)
Version 5.4.0.6 and Version 5.4.1.5
Terminology
Terminology
Description