Cisco Cisco Firepower Management Center 2000
21
FireSIGHT System Release Notes
Resolved Issues
Resolved an issue where the system incorrectly allowed you to cluster a 3D8260 device with a 3D8270 device.
(CSCuw92248)
(CSCuw92248)
Resolved an issue where, if you configured Cisco Redundancy Protocol (SFRP) via an IPv6 address on a Series 3
pair with routed or hybrid interfaces, and the system experienced a fail-over, the system incorrectly handled
sessions shared between pair members (CSCux73498)
pair with routed or hybrid interfaces, and the system experienced a fail-over, the system incorrectly handled
sessions shared between pair members (CSCux73498)
Resolved an issue where resuming a failed upgrade for a Defense Center pair caused an incomplete upgrade, broken
HA state and an inability edit the access control policy. (CSCuy05808)
HA state and an inability edit the access control policy. (CSCuy05808)
Resolved an issue where the network map experienced issues if the last entry in the RNA map list was a duplicate.
(CSCuy01269)
(CSCuy01269)
Resolved an issue where flash files that use LZMA compression were not decompressed. (CSCuy22393)
Resolved an issue where, if you edited the configuration of a Defense Center in a high availability pair running Version
5.4.1.3 or later, the other Defense Center in the pair did not correctly synchronize the changes. (CSCuy32815)
5.4.1.3 or later, the other Defense Center in the pair did not correctly synchronize the changes. (CSCuy32815)
Resolved an issue where, if you edited a base intrusion policy used by one or more child policies, the system did not
mark the child policies as out-of-date when it should. (CSCuy32822)
mark the child policies as out-of-date when it should. (CSCuy32822)
Resolved an issue where intrusion policies continuously and unsuccessfully attempted to sync paired Defense
Centers due to taking longer than a configured timeout. (CSCuy33982)
Centers due to taking longer than a configured timeout. (CSCuy33982)
Resolved an issue where, if a registered ASA FirePOWER module experienced memory corruption, the system
suffered a network outage and restarted. (CSCuy37234)
suffered a network outage and restarted. (CSCuy37234)
Resolved an issue where, if you removed a user from all the groups within a LDAP connection referenced in the
access control policy and applied configuration changes, then clicked Download users and groups from the Users
page (Policies > Users), the system did not update the applied configuration and continued to process traffic as if
the group(s) still contained the user. (CSCuy39685)
access control policy and applied configuration changes, then clicked Download users and groups from the Users
page (Policies > Users), the system did not update the applied configuration and continued to process traffic as if
the group(s) still contained the user. (CSCuy39685)
Improved CIP traffic detection on mid-stream sessions. (CSCuy43852)
Resolved an issue where if you enabled the use of a proxy on the Defense Center and submitted captured files to
the Cisco cloud for dynamic analysis, the system generated a Dynamic Analysis Failed (Network Issue) error and
did not successfully submit the files for analysis. (CSCuy49613)
the Cisco cloud for dynamic analysis, the system generated a Dynamic Analysis Failed (Network Issue) error and
did not successfully submit the files for analysis. (CSCuy49613)
Resolved an issue where, if you applied an intrusion rule set to Drop and Generate Events and enabled Sensitive
Data Detection in the Advanced Settings tab of the intrusion Edit Policy page (Policies > Intrusion > Intrusion
Policy), then edited the Sensitive Data Detection page and checked Masks, the system did not correctly mask some
sensitive data generated in intrusion events. (CSCuy56094)
Data Detection in the Advanced Settings tab of the intrusion Edit Policy page (Policies > Intrusion > Intrusion
Policy), then edited the Sensitive Data Detection page and checked Masks, the system did not correctly mask some
sensitive data generated in intrusion events. (CSCuy56094)
Resolved an issue where access control rules did not function correctly for web applications and URLs that were
SPDY-enabled. (CSCuy65157)
SPDY-enabled. (CSCuy65157)
Resolved an issue where updating a DC750 from Version 5.4 to Version 5.4.1.6 or later failed. (CSCuy72106)
Resolved an issue where creating a stack on a Defense Center failed, the Device Management page (Devices >
Device Management) and the Policies page did not load, and the system generated a Task failure
(3c428400-ebb6-11e5-b1fb-4696ad84e4e4) Update stack : Unable to load SF::PeerManager::ClusterMgmt:
Attempt to reload SF/PeerManager/ClusterMgmt.pm aborted. error. (CSCuy79698)
Device Management) and the Policies page did not load, and the system generated a Task failure
(3c428400-ebb6-11e5-b1fb-4696ad84e4e4) Update stack : Unable to load SF::PeerManager::ClusterMgmt:
Attempt to reload SF/PeerManager/ClusterMgmt.pm aborted. error. (CSCuy79698)
Issues Resolved in Previous Versions
Previously resolved issues are listed by version.