topic SRU update in FMC in Network Security

SRU update in FMC

Psmurali89 — Sun, 10 Dec 2023 17:51:26 GMT

Hi All,

Am planning to upgrade the FMC, After the upgrade am planning to update the SRU and VDB and push the updates to FTD. I read in notes that SRU updates may change/delete the rules. Will this have any operational impact?

Also, am planning to do FMC update first and then deploy to FTD and then following week am planning to do SRU and VDB and push the updates to FTD. I hope this should be ok?

Re: SRU update in FMC

Marius Gunnerud — Mon, 11 Dec 2023 12:25:06 GMT

Often during upgrades the SRU and VDB will also be updated. I would suggest checking the installed version after the upgrade as it might already be the latest version.

When updating SRU and VDB there can be a small "blip" in the network when the new rules are pushed as the SNORT engine might be restarted in the process. The outage should not last long so, depending on your company's change policies, you might be able to do this during regular working hours.

Re: SRU update in FMC

Marvin Rhoads — Mon, 11 Dec 2023 13:20:53 GMT

The rules mentioned are Intrusion Policy rules, not Access Control Policy rules.