Going over the release notes it appears to be a much better release that fixes the biggest problems (upgrades/deploys/better analysis/faster overall) and wonder if anyone has given it a shot yet? Looks to be a one step upgrade from all the way back to 6.1.x for the FMC and 6.2.x for the FTDs/ASA modules with a few gotchas. Biggest one is if you have ever ran 6.2.3.12 you're boned and need to fresh start it if you don't want to call TAC.
Also seems that they figured out a way to do deploys where snort doesn't drop all packets during the engine restarts and just fails open during that time. That's nice cause now I can deploy and not cause traffic stoppage.
Also the upgrade time seems to be waaaaaaaay better. I'll see how that pans out when I upgrade my virtual boxes. I have a hard time believing 6 minute upgrade for 4100s from 6.2.x. See how that pans out on a bare box.
Has anyone worked on 6.4 yet?
No comments:
Post a Comment