Cisco Cisco IPS 4255 Sensor
15
Release Notes for Cisco Intrusion Prevention System 6.1(3)E3
OL-20114-01
Upgrading to Cisco IPS 6.1(3)E3
IPS 6.1(3)E3 Upgrade Notes and Caveats
•
The minimum required version for upgrading to 6.1(3)E3 is 5.0(1) or later, which is available as a
download from Cisco.com. Use the show version command in the CLI to verify your sensor version
or view it in IDM or IME.
download from Cisco.com. Use the show version command in the CLI to verify your sensor version
or view it in IDM or IME.
•
Use the IPS-AIM-K9-6.1-3-E3.pkg upgrade file to upgrade the AIM IPS and the
IPS-NME-K9-6.1-3-E3.pkg upgrade file to upgrade the NME IPS. For all other supported sensors,
use the IPS-K9-6.1-3-E3.pkg upgrade file.
IPS-NME-K9-6.1-3-E3.pkg upgrade file to upgrade the NME IPS. For all other supported sensors,
use the IPS-K9-6.1-3-E3.pkg upgrade file.
•
If you configured Auto Update for your sensor, copy the Cisco IPS 6.1(3)E3 update to the directory
on the server that your sensor polls for updates.
on the server that your sensor polls for updates.
•
After installing IPS 6.1(3)E3, you must reboot the sensor.
•
You cannot uninstall IPS 6.1(3)E3. You must reimagine the sensor using a system image file. All
configuration settings are lost.
configuration settings are lost.
•
If you are using automatic update with a mixture of the AIM IPS, NME IPS, and other IPS
appliances or modules, make sure you put both the 6.1(3)E3 upgrade file (IPS-K9-6.1-3-E3.pkg),
the AIM IPS upgrade file (IPS-AIM-K9-6.1-3-E3.pkg), and the NME IPS upgrade file
(IPS-NME-K9-6.1-3-E3.pkg) on the automatic update server so that the AIM IPS and NME IPS can
correctly detect which file needs to be automatically downloaded and installed. If you only put the
6.1(2) E3 upgrade file (IPS-K9-6.1-3-E3.pkg) on the server, the AIM IPS and NME IPS will
download and try to install the wrong file.
appliances or modules, make sure you put both the 6.1(3)E3 upgrade file (IPS-K9-6.1-3-E3.pkg),
the AIM IPS upgrade file (IPS-AIM-K9-6.1-3-E3.pkg), and the NME IPS upgrade file
(IPS-NME-K9-6.1-3-E3.pkg) on the automatic update server so that the AIM IPS and NME IPS can
correctly detect which file needs to be automatically downloaded and installed. If you only put the
6.1(2) E3 upgrade file (IPS-K9-6.1-3-E3.pkg) on the server, the AIM IPS and NME IPS will
download and try to install the wrong file.
•
When you install the system image for your sensor, all accounts are removed and the default account
and password are reset to cisco.
and password are reset to cisco.
•
You must have a valid Cisco Service for IPS Maintenance contract per sensor to receive and use
software upgrades from Cisco.com.
software upgrades from Cisco.com.
•
When you upgrade the AIM IPS and NME IPS using automatic upgrade, you must disable heartbeat
reset on the router before placing the upgrade file on your automatic update server. After the
AIM IPS and NME IPS have been automatically updated, you can reenable heartbeat reset. If you
do not disable heartbeat reset, the upgrade can fail and leave the AIM IPS and NME IPS in an
unknown state, which can require a system reimage to recover.
reset on the router before placing the upgrade file on your automatic update server. After the
AIM IPS and NME IPS have been automatically updated, you can reenable heartbeat reset. If you
do not disable heartbeat reset, the upgrade can fail and leave the AIM IPS and NME IPS in an
unknown state, which can require a system reimage to recover.
•
If you install an update on your sensor and the sensor is unusable after it reboots, you must reimage
your sensor.
your sensor.
•
After you upgrade any IPS software on your sensor, you must restart the IDM to see the latest
software features.
software features.
For More Information
•
For the procedure for using the show version command in the CLI, refer to
. To view version information in IDM, refer to
•
For the procedures for reimaging all sensors, refer to
•
For the procedure for configuring automatic update, for the CLI refer to
for IDM refer to
for IME refer to
•
For the procedure for disabling heartbeat reset, for the AIM IPS refer to
, and for the NME IPS refer to