SRU update in FMC

[Psmurali89]

Hi All, 

Am planning to upgrade the FMC, After the upgrade am planning to update the SRU and VDB and push the updates to FTD. I read in notes that SRU updates may change/delete the rules. Will this have any operational impact? 

Also, am planning to do FMC update first and then deploy to FTD and then following week am planning to do SRU and VDB and push the updates to FTD. I hope this should be ok? 

[Marius Gunnerud]

Often during upgrades the SRU and VDB will also be updated.  I would suggest checking the installed version after the upgrade as it might already be the latest version.

When updating SRU and VDB there can be a small "blip" in the network when the new rules are pushed as the SNORT engine might be restarted in the process.  The outage should not last long so, depending on your company's change policies, you might be able to do this during regular working hours.

[Marvin Rhoads]

The rules mentioned are Intrusion Policy rules, not Access Control Policy rules.