Cisco Cisco IPS 4255 Sensor

Using manual update:

If you want to manually update your sensor, copy the 7.0(2)E4 update files to the directory on 
the server that your sensor polls for updates. 

When you upgrade the AIM IPS or the NME IPS using manual upgrade, you must disable 
heartbeat reset on the router before installing the upgrade. You can reenable heartbeat reset after 
you complete the upgrade. If you do not disable heartbeat reset, the upgrade can fail and leave 
the AIM IPS or the NME IPS in an unknown state, which can require a system reimage to 
recover. 

Global correlation health status defaults to red and changes to green after a successful global 
correlation update. Successful global correlation updates require a DNS server or an HTTP proxy 
server. Because DNS and HTTP proxy server configuration features are new to IPS 7.0, they are 
unconfigured after an upgrade from 5.x or 6.x to 7.0(2)E4. As a result, global correlation health and 
overall sensor health status are red until you configure a DNS or HTTP proxy server on the sensor. 
If the sensor is deployed in an environment where a DNS or HTTP proxy server is not available, you 
can address the red global correlation health and overall sensor health status by disabling global 
correlation and configuring sensor health status not to include global correlation health status.

If you install an update on your sensor and the sensor is unusable after it reboots, you must reimage 
your sensor. You can reimage your sensor in the following ways:

For all sensors, use the recover command.

For the IPS 4240, IPS 4255, IPS 4260, and IPS 4270-20, use the ROMMON to restore the 
system image.

For the AIM IPS and NME IPS, use the bootloader.

For the IDSM2, reimage the application partition from the maintenance partition.

For the AIP SSM, reimage from the adaptive security appliance using the hw-module module 
1 recover configure/boot command.

When you install the system image for your sensor, all accounts are removed and the default account and 
password are reset to cisco.

For more information on Cisco Service for IPS Maintenance contracts, see 

For the procedure for configuring automatic update, refer to 

For the procedure for manually updating your sensor, refer to 

For the procedures for reimaging sensors, refer to 

. 

For the procedure for disabling heartbeat reset, for the AIM IPS refer to 

, and for the NME IPS refer to 

For the procedure for disabling global correlation, for the CLI refer to 

, 

for the IDM refer to 

, and for the IME refer to 

.

For the procedure for configuring sensor health to exclude global correlation health, for the CLI 
refer to 

, for the IDM refer to 

for the IME refer to 

.