Regularly update the FMC Server Version

SrednjaNivo 1Ručni pregledcisco-ftd

Opis

The Firepower Infrastructure OS Components are updated frequently by Cisco. It is recommended that the version of the FMC Server be checked monthly at a minimum, and updated if recommended. CIS assessment: Manual. Reported as SKIP with review instructions.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

CIS assessment: Manual. Navigate to Overview > Dashboard > Status Verify that the software version is at the desired level

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Before updating, it is recommended that the release notes for the target version are reviewed to assess any potential new issues that may be introduced, or any new functions or behavior changes that need to be accounted for. The release notes will also often have update time estimates, which can help in appropriately scheduling maintenance windows. It is also recommended that a formal testing procedure be written for Firepower, and that this procedure is executed after each update to ensure full functionality post update. To update FMC: - Navigate to System (Gear Icon) > Updates > Product Updates - If needed, upload the required FMC Update to the update list - Choose "Deploy" on the required update - Select the FMC Server that is the target of the update - Choose "Launch Readiness Check". Note that this can take an extended period of time. - If this completes successfully, Choose "Install". Note that this can take an extended period of time, and will frequently take the FMC Server out of service and/or reboot the server. It is recommended that this only be done in a scheduled maintenance window. - Execute your testing procedure to ensure that there are no functional changes that will affect the people or clients that use systems that are protected by your FMC installation.

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-ftdnetworkhardening
Referenca: CIS Cisco Firepower Threat Defense Benchmark v1.0.0 - 1.3.4 Regularly update the FMC Server Version