Field Notice: FN - 64002 - FS4000 FireSight Security Management Appliance - Software Upgrade Recommended

Available Languages

Updated:October 11, 2017

Document ID:FN64002

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	27-Oct-15	Initial Release
10.0	11-Oct-17	Migration to new field notice system

Products Affected

Affected Product ID	Comments
FS4000-BASE-K9
FS4000-K9

Defect Information

Defect ID	Headline
CSCuu93159	FS4000 firmware issues

Problem Description

Cisco has determined that some FS4000 FireSight security management appliances require software updates in order to meet specified system reliability.

Background

Cisco has determined that FS4000 FireSight security management appliances equipped with 960GB solid-state drives (SSDs) require firmware updates in order to meet specified system reliability. Products shipped between December 2014 and June 2015 contain outdated SSD and RAID firmware that might result in premature system failure.

Problem Symptom

The FS4000 security management appliances that operate with outdated SSD and RAID firmware might experience a failure of an SSD that leads to a system failure and a nonrecoverable loss of data. During system failure, the RAID volume disappears and the appliance becomes inoperable. A system reboot is required and the appliance will operate in degraded mode until the failed SSD is replaced.

Workaround/Solution

Cisco recommends that you upgrade the software of the FS4000 FireSight security management appliances to Version 5.4.1.3 or later.

This software will upgrade the SSD and RAID firmware in order to greatly improve the overall system reliability. The Cisco FireSIGHT Management Center software can be downloaded from the Cisco Software Download Center.

Use the system console in order to determine if your FS4000 management system requires this software upgrade.

How To Identify Affected Products

The FS4000 FireSight security management appliances that were manufactured between December 2014 and June 2015 are affected.

You can use any of these methods in order to obtain the chassis serial number:

From the Web User Interface.
From the CLI of the affected product.
Through a visual inspection of the affected product.

From the Web User Interface of the affected product, complete these steps:

Log in to the FS4000 security management appliance.
Choose System > Local > Configuration.
Locate the Serial Number field on the third line of the console screen.

From the CLI of the affected product, enter this information:

admin@Sourcefire3D:~$ sudo -i
Password:
root@Sourcefire3D:~# ipmitool fru print 0
Chassis Type : Rack Mount Chassis
Chassis Part Number : SR1234ABC
Chassis Serial : BZPR12345678
Remaining output data follows...

If you desire to perform a visual inspection of the affected product, the chassis serial number label is located at the top right side of the appliance. The chassis serial number can also be referenced on the sales order documentation.

Use the Cisco Serial Number Validation Tool in order to validate your FS4000 FireSight security management appliance serial number(s).

Note: If the part number of the appliance is 800-43879-02 (or higher) or shows deviation label "D513103" (located near the front at the top left corner), the unit is not affected.

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Cisco Notification Service—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.