SOURCEFIRE 3D SYSTEM RELEASE NOTES

Size: px

Start display at page:

Download "SOURCEFIRE 3D SYSTEM RELEASE NOTES"

Opal York
5 years ago
Views:

1 SOURCEFIRE 3D SYSTEM RELEASE NOTES Version August 14, 2008 These release notes are valid for Version of Sourcefire Defense Centers and Master Defense Centers. This patch is not available for 3D Sensors, 3D Sensor Software for Crossbeam Systems X-Series and C-Series, or RNA for Red Hat Linux. These release notes describe: New Features and Functionality on page 1 Issues Resolved in Version on page 2 Updating Existing Defense Centers and Master Defense Centers on page 2 Uninstalling the Update on page 5 Known Issues on page 5 Product Compatibility on page 6 New Features and Functionality Version does not contain any new features or functionality. VERSION SOURCEFIRE 3D SYSTEM RELEASE NOTES PAGE 1

2 Issues Resolved in Version Issues Resolved in Version The following issues are resolved in Version : Resolved an issue that could cause remote upgrades to fail in high availability deployments. (44040) Updating Existing Defense Centers and Master Defense Centers The following sections help you prepare for and install Version on your existing Defense Centers and Master Defense Centers. Do not install this patch on 3D Sensors or software sensors. Planning for the Update on page 2 Updating the Defense Center or Master Defense Center on page 3 After You Update Your Appliances on page 4 TIP! For information about installing and configuring new appliances, see the installation guide on the Documentation CD that was delivered with your appliance. Planning for the Update This section outlines how to plan for the update of your Defense Center and any sensors that it manages. This section also applies to Master Defense Centers. 1. Plan to update the Master Defense Center first. If your deployment includes a Master Defense Center managing one or more Defense Centers, make sure you update your Master Defense Center before updating any of its Defense Centers. 2. Make sure your appliances are running the correct version. To update to Version , your appliances must be running at least Version 4.7. If you are running an earlier version, you can obtain updates from the Sourcefire Support Site. 3. Make sure you have enough free disk space and allow enough time for the update. For appliances with up to 10 million events, the update takes approximately 15 minutes, so you should plan to perform the update during non-peak hours. This patch requires approximately 35MB on the / partition and 330MB on the /var partition. 4. Optionally, back up your event and configuration data. Although the update process retains event and configuration data, Sourcefire strongly recommends that you back the data up to a local computer before you perform the update. See your user guide for information about backing up your appliance. VERSION SOURCEFIRE 3D SYSTEM RELEASE NOTES PAGE 2

3 Updating Existing Defense Centers and Master Defense Centers 5. Perform the update, as described in Updating the Defense Center or Master Defense Center on page 3. In general, you can monitor its progress in the Defense Center s task queue (Operations > Monitoring > Task Status). IMPORTANT! When you upgrade a Defense Center that is half of a high availability pair, the Defense Centers in the pair stop sharing configuration information until the second Defense Center is upgraded. You must upgrade both Defense Centers separately. 6. Complete any required post-update steps, as described in After You Update Your Appliances on page 4. Sourcefire recommends that you check the Support Site for the latest SEU and vulnerability database (VDB) update. Updating the Defense Center or Master Defense Center If your deployment includes Master Defense Centers, you should update them before you update the Defense Centers that they manage. To update the Defense Center or Master Defense Center: 1. Download the Sourcefire 3D System Version update script (Sourcefire_3D_DC_Patch_ sh) from the Sourcefire Support Site. IMPORTANT! Download files directly from the Support Site and do not transfer them by . If you transfer an update file by , it may become corrupted. 2. Select Operations > Update. The Patch Management Update page appears. 3. Click Upload Update to browse to the location where you saved the update script, then click Upload. The update appears in the Updates list. 4. Next to the update you just uploaded, click Install. The Install Update page appears. 5. Under Selected Update, select the Defense Center and click Install. VERSION SOURCEFIRE 3D SYSTEM RELEASE NOTES PAGE 3

4 Updating Existing Defense Centers and Master Defense Centers 6. Confirm that you want to install the update and reboot the Defense Center. The update is installed and the Defense Center reboots. You can monitor the update's progress in the task queue (Operations > Monitoring > Task Status). WARNING! Do not use the web interface to perform any other tasks until the update has completed and the Defense Center reboots. Note that before the update completes, the Sourcefire 3D System may log you out. If this occurs, log in to the appliance and view the task queue. If the update is still running, continue to refrain from using the web interface until the update has completed. If the task queue stops updating with current status, manually refresh your browser. If you encounter issues with the update, for example, if the task queue indicates that the update has failed or if a manual refresh of the task queue shows no progress, do not restart the update. Instead, please contact Support. 7. After the update finishes, and the Defense Center reboots, log into the Sourcefire 3D System. 8. Clear your browser cache and force a reload of the browser. (Otherwise, the user interface may exhibit unexpected behavior.) 9. Select Operations > Help > About and confirm that the software version is listed as Version Verify that all managed sensors are successfully communicating with the Defense Center. 11. Continue with the tasks you need to perform after the update. For more information, see After You Update Your Appliances on page 4. After You Update Your Appliances After you complete the update, you must: install any patches or updates to the Sourcefire 3D System that are available on the Support Site install the latest SEU and reapply intrusion policies to any IPS detection engines Note that applying an intrusion policy causes IPS detection engines to restart, which can cause a short pause in processing and, for most detection engines with inline interface sets, may cause a few packets to pass through the sensor uninspected. install the latest vulnerability database (VDB), then push and install the VDB update on any managed 3D Sensor with RNA For more information, refer to the Sourcefire 3D System User Guide. VERSION SOURCEFIRE 3D SYSTEM RELEASE NOTES PAGE 4

5 Uninstalling the Update Uninstalling the Update Uninstalling the update results in an appliance running Version For information on uninstalling Version , refer to the release notes for that version. Note that if your IPS detection engines are deployed inline and your 3D Sensor does not have a fail-open network card, traffic is interrupted while the sensor reboots after the uninstallation has completed. If your 3D Sensor has a fail-open network card, some traffic may pass through the sensor uninspected while it reboots. To uninstall Version : 1. Select Operations > Update. The Patch Management Update page appears. 2. Next to the uninstaller that matches the update you want to remove, click Install. On the Defense Center, the Install Update page appears. Under Selected Update, select the Defense Center and click Install. On the 3D Sensor, there is no intervening page. 3. The Install Update page appears. Under Selected Update, select the Defense Center and click Install. 4. Confirm that you want to uninstall the update and reboot the appliance. The update is removed, the appliance reboots and returns to Version You can monitor the uninstallation progress in the task queue (Operations > Monitoring > Task Status). WARNING! If the task queue stops updating with current status, manually refresh your browser. If you encounter issues with the uninstallation, for example, if the task queue indicates that the uninstallation has failed or if a manual refresh of the task queue shows no progress, do not restart the uninstallation. Instead, please contact Support. Known Issues 5. After the uninstall finishes and the appliance reboots, log into the web interface once again. 6. Select Operations > Help > About and confirm that the software version is listed as Version There are no new known issues with this release. However, be sure to review the known issues in the release notes for previous releases. VERSION SOURCEFIRE 3D SYSTEM RELEASE NOTES PAGE 5

6 Product Compatibility Product Compatibility For Assistance Legal Notices Version of the Defense Center can also manage: versions x and x of the 3D Sensor version 4.6.x.x of the Intrusion Sensor version x of the RNA Sensor version x of IPS Software for Crossbeam X-Series and C-Series version x of RNA Software for Crossbeam X-Series and C-Series versions x of 3D Sensor Software for Crossbeam X-Series and C-Series versions x and x of RNA for Red Hat Linux If you have any questions or require assistance with the Sourcefire Defense Center, 3D Sensor, or any of the software sensors, please contact Sourcefire Support. Visit the Sourcefire Support Site at Sourcefire Support at Call Sourcefire Support at or Thank you for using Sourcefire products. Terms Of Use and Copyright and Trademark Notices The copyright in the Documentation is owned by Sourcefire, Inc., and is protected by copyright pursuant to US copyright law, international conventions, and other laws. You may use, print out, save on a retrieval system, and otherwise copy and distribute the documentation solely for non-commercial use, provided that (i) you do not modify the documentation in any way and (ii) you always include Sourcefire's copyright, trademark, and other notices, as well as a link to, or print out of, the full contents of this page and its terms. No part of the documentation may be used in a compilation or otherwise incorporated into another work, or be used to create derivative works, without the express prior written permission of Sourcefire, Inc. Sourcefire, Inc. reserves the right to change the Terms at any time, and your continued use of the Documentation shall be deemed an acceptance of those terms. Sourcefire, the Sourcefire logo, Snort, the Snort logo, Intrusion Sensor, Intrusion Agent, Real-time Network Awareness, RNA Sensor, Master Defense Center, Defense Center, Success Pack, 3D Sensor, and 3D System, are trademarks or registered trademarks of Sourcefire, Inc. All other trademarks are property of their respective owners Sourcefire, Inc. All rights reserved. VERSION SOURCEFIRE 3D SYSTEM RELEASE NOTES PAGE 6

SOURCEFIRE 3D SYSTEM RELEASE NOTES

SOURCEFIRE 3D SYSTEM RELEASE NOTES Version 5.3.0.2 Original Publication: April 21, 2014 Last Updated: April 25, 2016 These release notes are valid for Version 5.3.0.2 of the Sourcefire 3D System. Even