topic Please refer to the below in Endpoint Security

FirePOWER modules update

bkamrad — Fri, 21 Feb 2020 05:03:15 GMT

Hello,

I am wondering if Cisco TAC subscription is mandatory to update my FirePOWER module SI, URL, module image and etc. ?

I already have purchased my AMP license and applied it to my module.

Thanks

Please refer to the below

syeda3 — Thu, 16 Feb 2017 15:31:16 GMT

Please refer to the below document for the Q & A for Sourcefire Customers.

http://www.cisco.com/c/dam/en_us/services/acquisitions/downloads/sourcefire-customer-qa.pdf

Hope to help.

You are required to have a

Marvin Rhoads — Fri, 17 Feb 2017 05:48:40 GMT

You are required to have a Smartnet contract in order to be entitled to download and use updated FirePOWER software images for both the managed devices (sensors) and FirePOWER Management Center.

Security Intelligence (SI) feed, Vulnerability Database (VDB) definitions, Geolocation database updates and Snort Rule Updates (SRU) are all part of the IPS subscription. Cisco does not enforce it technically as of this date, but a current IPS subscription is required (per the licensing terms and conditions) to download those.

URL filtering is done via lookup to a cloud-based service and policies using URL filtering require that license type.

Thank you Marvin, this is

bkamrad — Tue, 21 Feb 2017 13:14:03 GMT

Thank you Marvin, this is what I was exactly looking for. I wasn't able to download all the definitions fist and suspicious about our support subscription. My problem was DNS configuration on FirePOWER module. I was under the impression that FirePOWER uses ASA's DNS settings which is obviously wrong.

Thanks again.

You're welcome.

Marvin Rhoads — Wed, 22 Feb 2017 00:11:27 GMT

You're welcome.

I tell m customers to think of the ASA FirePOWER module as analogous to a VM on an ESXi host. It shares only the "host" hardware resources - CPU, memory, storage and the management interface. All of the software configuration (routing, DNS, NTP, operating system etc.) are self-contained and configured solely on the FirePOWER module.