07-09-2015 10:24 PM - edited 03-12-2019 05:43 AM
Hi,
I want to make sure that our new Defense Centre & ASAs with FirePOWER are being kept up-to-date. I don't want to do any auto-updates of software (these I would do manually), but I do want to make sure that everything else that can be, is kept up-to-date.
Is this the correct way to do it? What actually gets updated as part of the Rule Updates?
System -> Updates -> Rule Updates -> Enable Rule Update Imports (re-apply intrusion policy option selected <- Is this needed or why would you not select this option?)
System -> Updates -> Geolocation Updates
and
Tools -> Scheduling -> Add Task
Download -> Vulnerability Database
Install -> Vulnerability Database
Tools -> Scheduling -> Add Task
Update URL Filtering Database (Do I need to install these somehow?)
Thanks - Derek
07-10-2015 06:54 AM
That will cover it.
Some customers prefer to make an individual decision on the Rules included in a given update before applying them in their environment. That's why the option is there to apply them or not.
I don't believe the URL filtering db needs to be applied out to sensors. Downloading it into FMC suffices.
07-12-2015 08:21 PM
Thanks Martin - Derek.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide