Notices
Computer & Technology Related Post here for help and discussion of computing and related technology. Internet, TVs, phones, consoles, computers, tablets and any other gadgets.

Sourcefire and Cisco FirePower/FireSight

Thread Tools
 
Search this Thread
 
Old 09 February 2018, 12:55 PM
  #1  
markr1963
Scooby Regular
Thread Starter
 
markr1963's Avatar
 
Join Date: Jun 2002
Location: Perth, Western Australia
Posts: 1,866
Likes: 0
Received 0 Likes on 0 Posts
Default Sourcefire and Cisco FirePower/FireSight

Anyone know this stuff?

I have a customer with Sourcefire Management and Sensors running version 4.10. So out of date, it's not funny. The intention is to get things up to FirePower/FireSight 6.2. As far as I can tell the hardware is up to it.

AFAIK, there's no upgrade path from 4.10 to 6.2 (happy to be corrected) so I'm looking at manually recreating policies and such. The environment is not that complex so I can live with that. What I need help with is the imaging of the appliances.

I've seen articles that say booting from a USB isn't possible, that the ISO has to be pulled from an SCP server. Is this true? What I want to do is to put a new FMC/FTD 6.2 image on the existing hardware.

Any guidance will be gratefully appreciated.

TIA
Mark
Old 10 February 2018, 09:29 PM
  #2  
tarmac terror
Scooby Regular
iTrader: (2)
 
tarmac terror's Avatar
 
Join Date: May 2005
Location: Northern Ireland
Posts: 2,498
Received 0 Likes on 0 Posts
Default

Upgrade the FMC first, place the file for your devices on the FMC and deploy from there?

Have a look at this...
https://www.cisco.com/c/en/us/suppor...wer-threa.html
Old 12 February 2018, 01:57 PM
  #3  
markr1963
Scooby Regular
Thread Starter
 
markr1963's Avatar
 
Join Date: Jun 2002
Location: Perth, Western Australia
Posts: 1,866
Likes: 0
Received 0 Likes on 0 Posts
Default

Originally Posted by tarmac terror
Upgrade the FMC first, place the file for your devices on the FMC and deploy from there?

Have a look at this...
https://www.cisco.com/c/en/us/suppor...wer-threa.html
Thanks for that. Because the current setup is so far out of whack the plan was to do a clean install of FMC. I've had a look around on Cisco's site and I keep seeing something like "...don't connect a USB to a KVM as the appliance might try to boot from that mass storage device...".

Can I image an FS750 Sourcefire appliance from USB or do I have to do the scp/sftp thing?

I've reached out to my local Cisco SE but nothing...
Old 16 February 2018, 03:07 PM
  #4  
bioforger
Scooby Regular
iTrader: (1)
 
bioforger's Avatar
 
Join Date: Jan 2002
Location: Pig Hill, Wiltsh1te
Posts: 16,995
Received 5 Likes on 5 Posts
Default

reached out.... god
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
brett555
Non Scooby Related
3
21 August 2003 09:56 PM
MJW
Non Scooby Related
6
20 March 2003 09:11 PM
dean harris
ScoobyNet General
6
08 July 2002 09:07 PM



Quick Reply: Sourcefire and Cisco FirePower/FireSight



All times are GMT +1. The time now is 09:02 AM.