Change in applications after SourceFIRE upgrade?

[Brandon Koehler]

We recently upgraded our SourceFIRE on ASA system from 5.4.1 to 6.2.0.2. (Reimaged the SFR modules, upgraded the virtual FMC) I've noticed since the upgrade that the number of applications being detected is drastically lowered. The Friday before the upgrade, we were 'seeing' ~400 applications according the dashboard. Monday and today, we're between 150 and 200. Also, the number one application last week, PCoIP, doesn't even appear in the list anymore, even though we heavily use VMware Horizon. 

I'm not too worried about PCoIP not being detected, but I'm concerned there are settings that we are missing that were reset. 

Thanks!

[yogdhanu]

Hi Brandon,

I would suggest to check the VDB version  you are running. Make sure that its upto date.

The no of application detected would depend on the rules but shouldn't change that much with just upgrade.

If VDB version is latest, may be open a TAC case for some analysis.

Thanks,

Yogesh