topic FMC VDB Update in Network Security

FMC VDB Update

Thomas Yarger — Fri, 21 Feb 2020 15:06:22 GMT

Hi All,

I have a customer on a very OLD Vulnerability DB version and I'm a bit leery about updating as the customer is very sensitive to outages and demands perfection with any change/update. Are there any gotcha's or caveats I should be aware of before I update the DB? Thanks!

Re: FMC VDB Update

Marvin Rhoads — Wed, 10 Jan 2018 01:58:43 GMT

You definitely want a change control window with scheduled outage.

A VDB update restarts Snort when deployed:

https://www.cisco.com/c/en/us/td/docs/security/firepower/610/configuration/guide/fpmc-config-guide-v61/policy_management.html

So you will have a few seconds on unavailability for the IPS. Depending on the architecture (fail open etc.), that may result in a brief loss of service.

Other than that it should be fine. You can always open a proactive TAC case to be doubly sure.

Re: FMC VDB Update

Thomas Yarger — Wed, 10 Jan 2018 15:29:19 GMT

Thanks Marvin!

Re: FMC VDB Update

gjames-lic — Tue, 11 Jun 2019 01:15:48 GMT

How did you go with this? Mission success?

Any pre reqs for Snort version etc.

Thanks

Adam