Virtual defence center and bandwidth

[l.buschi]

Hi all,

I have 8 asa5506 installed in 8 different locations connected by a WAN MPLS circuit. 

I wuold like to implement next generation services like IPS, URL and AMP and manage all my firewall with a virrtual defence center installed on my central site.

I don't have a very large bandwidth from spoke sites tu my hub sites.

I would like to konw if it's possible to download and install avery recurring update of NG services directly from internet or downloaded in a local PC instead of installing them from central virtual defence center in order to save WAN bandwidth.

Thanks

Johnny

[nspasov]

Hi Johnny-

You can manually update sensors (see link below) but it is not recommended. Also, you always want to make sure that FireSIGHT is updated first. 

One thing you can do is to schedule the updates to happen during off business hours, thus not affecting your regular production traffic:

http://www.cisco.com/c/en/us/support/docs/security/asa-firepower-services/200369-Patch-Update-Installation-in-FirePOWER-M.html

I hope this helps!

Thank you for rating helpful posts!