Getting Warning in FMC Cisco Intelligence Feed Received Code

[King_1988]

Hi,

I am getting above warning from FMC (Version : 6.4.10). Internet reachability is ok from FMC. And Snort rules are updated accordingly. Then what could be the issue and how to solve it?

[Mark Elsen]

                - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv14304

 M.

[Marvin Rhoads · Accepted solution]

FMC 6.4.0.10 (there was no 6.4.10 version) may also be affected by this field notice: https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72332.html

Please upgrade from this very old FMC version to something currently supported! (at least 6.4.0.16 but preferably something much later than that)

[King_1988]

Does it have any service impact?

[Marvin Rhoads]

It just means you won't have the protection your firewall would otherwise be giving via updates to the SI feed - newly known malicious addresses and URLs will not be automatically blocked as they would have otherwise been.

[King_1988]

So what is the solution other than upgrading? 

[Marvin Rhoads]

Put up with the warning - it is rightly pointing out that you are not getting the security you might otherwise assume.

[King_1988]

Thanks a lot Marvin for your information. I will let you know after upgrading the version. 

[King_1988]

Thanks a lot Marvin. After updating patches to 6.4.0.14 the error gone. But one thing i am just confused about that what kind of risk does it have if Security Intelligence Feed is not being downloaded ? On the other hand, Snort rules are getting updated fine. So what is the major difference between these two?