Release Notes

Supported Features

This release enables you to quarantine offending endpoints that are detected by the Cisco Firepower Management Center Remediation Module for ACI, using APIC version 5.1(1h). For version 2.0.1 of the remediation module, the supported behavior when endpoints are quarantined is described in the following table:

VMware Distributed Virtual Switch (DVS)

Bare metal

Verified in IPS inline mode

Yes

Yes

EPG bridge mode

Yes

Yes

EPG routed mode

No

No

Multiple IP to one MAC checking

Yes

Yes

Create only an IP address filter uSeg attribute

No

No

Create both an IP address filter and a MAC address filter uSeg attribute

Yes

Yes

Quarantine source and destination endpoints

Yes

Yes

Apply a predefined management contract to source and destination endpoints

Yes

Yes

Always allow traffic to critical servers

Yes

Yes

Download and Install the Cisco Firepower Management Center Remediation Module for ACI

Before you begin

Make sure you're using compatible versions as shown in the following table.

Table 1. Compatibility with the remediation module, Management Center and APIC

Remediation module version compatible with....

Management Center version

APIC version

2.0.1

6.7 and later

5.1(1h)

Procedure


Step 1

Download the Cisco Firepower Management Center Remediation Module for ACI (link to download) to a machine on which you'll connect to the management center.

Step 2

If you haven't done so already, log in to the management center.

Step 3

Click Policies > Actions > Modules.

Step 4

In the Install a New Module section, click Browse.

Step 5

Follow the prompts to upload the remediation module.

Step 6

Click Install.

Step 7

When successfully installed, the Cisco Firepower Management Center Remediation Module for ACI is displayed in the list of installed remediation modules:

Verify the Secure Firewall Remediation Module installed correctly


Resolved Caveats

Version 2.0.1

There are no resolved caveats in the Cisco Firepower Management Center Remediation Module for ACI version 2.0.1.

Open Caveats

Version 2.0.1

There are no open caveats in the Cisco Firepower Management Center Remediation Module for ACI version 2.0.1.

Resolved Enhancement Requests

Version 2.0.1

Link to issue

Description

CSCvz49674

Add quarantine destination type in APIC/FMC Remediation Module for FMC 6.7 or earlier

CSCvz67593

Avoid quarantine critical servers in APIC/FMC Remediation Module for FMC 6.7 or earlier

CSCwa21071

Apply predefined contract on APIC through remediation module on FMC 6.7

CSCwa18128

Rebranding the ACI/FirePOPWER Remediation Module

Open Enhancement Requests

Version 2.0.1

There are no open enhancement requests in the Cisco Firepower Management Center Remediation Module for ACI version 2.0.1.

Related Documentation

For additional information about the Cisco Cisco Firepower Management Center Remediation Module for ACI, see the appropriate guide.

For additional information about the Cisco APIC and ACI, see APIC Documentation.

For information on using the Cisco Bug Search Tool (BST), submitting a service request, and gathering additional information, see the Support Case Manager.