Cisco Cisco Firepower Management Center 2000
21
FireSIGHT System Release Notes
Resolved Issues
Resolved an issue where, if you installed a vulnerability database (VDB) update on a Defense Center managing a device with no
licenses or policies, the VDB update appeared to fail even though it successfully completed. (CSCuz11048)
licenses or policies, the VDB update appeared to fail even though it successfully completed. (CSCuz11048)
Generated malware events no longer contain extraneous linebreak characters. (CSCuz16055)
Resolved an issue where, if you deployed an SSL policy to a device managed by an Defense Center running Version 6.0.0 and updated
the Defense Center to Version 6.0.1.1, then redeployed configuration and the system experienced a high volume of traffic, the system
experienced a disruption in traffic. (CSCuz19469)
the Defense Center to Version 6.0.1.1, then redeployed configuration and the system experienced a high volume of traffic, the system
experienced a disruption in traffic. (CSCuz19469)
Resolved an issue where, if you updated a Defense Center to Version 5.4.1.6 or later and applied policy to a registered device running
Version 5.3.x, policy apply failed. (CSCuz52737)
Version 5.3.x, policy apply failed. (CSCuz52737)
Resolved an issue where, if you applied an SSL rule, the system applied the inherited default action for handshake errors instead of the
traffic that matched the rule. (CSCuz54524)
traffic that matched the rule. (CSCuz54524)
Resolved an issue where updating a Defense Center from Version 5.4.0 to Version 5.4.1.7 caused the system to reinstall all intrusion
rule updates instead of the latest intrusion rule update. (CSCuz68570)
rule updates instead of the latest intrusion rule update. (CSCuz68570)
Resolved an issue where, if you deployed an SSL policy set to Decrypt - Resign and the system immediately restarted, the system
experienced issues. (CSCuz79056)
experienced issues. (CSCuz79056)
If you apply an access control policy containing an excessive amount of access control rules with the default action set to Trust, the
system may incorrectly generate events for traffic matching any of the rules set to Trust when it should not. (CSCuz83816)
system may incorrectly generate events for traffic matching any of the rules set to Trust when it should not. (CSCuz83816)
Resolved an issue where, if fragmented UDP packets with different VLAN tags traveled through the same inline set on a Series 3
device, the fragmented packets experienced a 10 second delay and the system dropped traffic. (CSCva03312)
device, the fragmented packets experienced a 10 second delay and the system dropped traffic. (CSCva03312)
Resolved an issue where memory issues on stacked 8000 Series devices caused processes to terminate. (CSCva39997)
Issues Resolved in Previous Versions
Previously resolved issues are listed by version.
Issues Resolved in Version 5.4.0.8 and 5.4.1.7:
Resolved an issue where, if you registered a device to a pair of a Defense Centers and applied an access control policy with URL rules
and turned on URL cloud query, the managed device did not successfully request a URL lookup. (CSCus99059)
and turned on URL cloud query, the managed device did not successfully request a URL lookup. (CSCus99059)
Resolved an issue where, if you clicked the Email Status to: link on the Scheduling page (System > Tools > Scheduling), the web
browser incorrectly displayed a 500 Internal Server Error message. (CSCuv22590)
browser incorrectly displayed a 500 Internal Server Error message. (CSCuv22590)
Resolved an issue where the FSIC incorrectly checked extraneous files. (CSCuv55284)
Resolved an issue where, in some cases, attempting to backup and restore a Defense Center failed. (CSCuv95657, CSCuw71197)
Improved general appliance functionality. (CSCuw44360)
Resolved an issue where the system incorrectly allowed you to cluster a 3D8260 device with a 3D8270 device. (CSCuw92248)
Resolved an issue where, if you configured Cisco Redundancy Protocol (SFRP) via an IPv6 address on a Series 3 pair with routed or
hybrid interfaces, and the system experienced a fail-over, the system incorrectly handled sessions shared between pair members
(CSCux73498)
hybrid interfaces, and the system experienced a fail-over, the system incorrectly handled sessions shared between pair members
(CSCux73498)
Resolved an issue where resuming a failed upgrade for a Defense Center pair caused an incomplete upgrade, broken HA state and an
inability edit the access control policy. (CSCuy05808)
inability edit the access control policy. (CSCuy05808)
Resolved an issue where the network map experienced issues if the last entry in the RNA map list was a duplicate. (CSCuy01269)
Resolved an issue where flash files that use LZMA compression were not decompressed. (CSCuy22393)