FirePOWER modules update

[bkamrad]

Hello,

I am wondering if Cisco TAC subscription is mandatory to update my FirePOWER module SI, URL, module image and etc. ?

I already have purchased my AMP license and applied it to my module.

Thanks

[syeda3]

Please refer to the below document for the Q & A for Sourcefire Customers.

http://www.cisco.com/c/dam/en_us/services/acquisitions/downloads/sourcefire-customer-qa.pdf

Hope to help.

[Marvin Rhoads · Accepted solution]

You are required to have a Smartnet contract in order to be entitled to download and use updated FirePOWER software images for both the managed devices (sensors) and FirePOWER Management Center.

Security Intelligence (SI) feed, Vulnerability Database (VDB) definitions, Geolocation database updates and Snort Rule Updates (SRU) are all part of the IPS subscription. Cisco does not enforce it technically as of this date, but a current IPS subscription is required (per the licensing terms and conditions) to download those.

URL filtering is done via lookup to a cloud-based service and policies using URL filtering require that license type. 

[bkamrad]

Thank you Marvin, this is what I was exactly looking for. I wasn't able to download all the definitions fist and suspicious about our support subscription. My problem was DNS configuration on FirePOWER module. I was under the impression that FirePOWER uses ASA's DNS settings which is obviously wrong.

Thanks again.

[Marvin Rhoads]

You're welcome.

I tell m customers to think of the ASA FirePOWER module as analogous to a VM on an ESXi host. It shares only the "host" hardware resources - CPU, memory, storage and the management interface. All of the software configuration (routing, DNS, NTP, operating system etc.) are self-contained and configured solely on the FirePOWER module.