Using Legacy Rna Host And Rua User Licenses - Source fire Sourcefire 3D System Installation Manual

Introduction to the Sourcefire 3D System
Licensing the Sourcefire 3D System

Using Legacy RNA Host and RUA User Licenses

Version 5.2
In Version 4.10.x of the Sourcefire 3D System, RNA Host and RUA User feature
licenses determined your monitored host and user limits, respectively. If your
Defense Center was previously running Version 4.10.x, you can use your legacy
host and user licenses instead of a FireSIGHT license.
Version 5.2 Defense Centers using legacy licenses use the RNA Host limit as the
FireSIGHT host limit and the RUA User limit as both the FireSIGHT user and
authoritative user limit. The FireSIGHT Host License Limit health module alerts
appropriately for your licensed limit.
Note that RNA Host and RUA User limits are cumulative. That is, you can add
multiple licenses of each type to the Defense Center to monitor the total number
of hosts or users allowed by the licenses.
If you later add a FireSIGHT license, the Defense Center uses the higher of the
limits. For example, the FireSIGHT license on the DC1500 supports up to 50,000
hosts and users. If the RNA Host limit on your Version 4.10.x DC1500 was higher
than 50,000, using that legacy host license on the same Defense Center running
Version 5.2 gives you the higher limit. For your convenience, the web interface
displays only the licenses that represent the higher limits.
IMPORTANT!
Because FireSIGHT license limits are matched to the hardware
capabilities of Defense Centers, Sourcefire does not recommend exceeding
them when using legacy licensing. For guidance, contact Sourcefire Support.
Because there is no update path from Version 4.10.x to Version 5.2, you must use
an ISO image to "restore" the Defense Center. Note that reimaging results in the
loss of all configuration and event data on the appliance. You cannot import this
data onto an appliance after a reimage. For more information, see
Sourcefire Appliance to Factory Defaults
IMPORTANT! Only reimage your appliances during a maintenance window.
Reimaging resets devices in an inline deployment to a non-bypass configuration
and disrupts traffic on your network until you reconfigure bypass mode. For more
information, see Traffic Flow During the Restore Process
During the restore process, you are prompted to delete license and network
settings. Keep these settings, although you can re-add them later if you
accidentally delete them. Note that Version 5.2 Defense Centers cannot manage
Version 4.10.x devices. You can, however, restore and update supported Version
4.10.x devices to the latest version. For more information, see
Sourcefire Appliance to Factory Defaults
Sourcefire 3D System Installation Guide
on page 198.
on page 199.
Restoring a
on page 198.
Chapter 1
Restoring a
22