topic Hi Nathan,Can you provide a in Network Security

How to downgrade sourcefire rules

Nathan Burchett — Tue, 12 Mar 2019 12:37:40 GMT

I was wondering what the process was to downgrade the VDB to an earlier version. We are working on applying a backup but are unable to because the VDB build is currently 231 and needs to be 222. Con someone help with this?

There is a way to do this I

Joel Esler — Sun, 22 Feb 2015 02:42:30 GMT

There is a way to do this I believe. It can be done from the command line. I don't know if it's documented in any manuals, you may want to contact support for steps to do this.

Hi Nathan,Sourcefire Support

mnobile — Mon, 23 Feb 2015 19:24:58 GMT

Hi Nathan,

Sourcefire Support does not recommend to rollback the VDB versions. It is possible under certain circumstances. However, I don't believe that will help you in this scenario, as you can only rollback one version at a time. Example: you can roll back from VDB 231 to VDB 229, but not VDB 231 to VDB 222. Sourcefire Support would advise to re-image the appliance and install VDB 222 specifically. VDB 222 won't be found on the support site(It has been archived), I have uploaded at the following link:

http://uploads.sourcefire.com/download/72fb962560022f01921da18a2dd48a83/20150223192010-Sourcefire_VDB_Fingerprint_Database-4.5.0-222.sh

If you have any questions, please let me know. Thanks!

Regards,
Michael Nobile
Sourcefire, now part of Cisco

Hi Nathan,Sourcefire Support

mnobile — Mon, 23 Feb 2015 19:25:57 GMT

removed, replied directly to the initial query

I haven't been able to get

Nathan Burchett — Thu, 26 Feb 2015 15:13:09 GMT

I haven't been able to get this to load onto the machine. it gives me the Error, "Exit [10] import failed" What is that?

Hi Nathan,Can you provide a

mnobile — Thu, 26 Feb 2015 15:24:54 GMT

Hi Nathan,

Can you provide a more verbose error? On the Defense Center please navigate to Analysis > Search.
The Search page appears. From the Table drop‑down list, select Rule Update Import Log. The page reloads with the appropriate constraints.

Regards,
Michael Nobile
Sourcefire, now part of Cisco

Re: How to downgrade sourcefire rules

st92 — Thu, 29 Nov 2018 07:31:25 GMT

Hi Nathan,

I am facing the same issue, the backup file which i need to restore is having 304 version and FMC is having 305 version so is there any way that i can degrade the 305 version to 304 to make it compatible with backup files.