Cisco Cisco IPS 4255 Sensor

Seite von 38
 
24
Release Notes for Cisco Intrusion Prevention System 6.1(3)E3
OL-20114-01
  Installing Cisco IME
Installing Cisco IME
If you have a version of Cisco IPS Event Viewer installed, the Install wizard prompts you to remove it 
before installing IME. 
IME event monitoring is also supported in IOS-IPS versions that support the Cisco IPS 5.x/6.x signature 
format. We recommend IOS-IPS 12.4(15)T4 if you intend to use IME to monitor an IOS IPS device. 
Some of the new IME functionality including health monitoring is not supported.
Caution
Do not install IME on top of existing installations of CSM or IEV. You must uninstall these applications 
before installing IME.
Caution
Disable any anti-virus or host-based intrusion detection software before beginning the installation, and 
close any open applications. The installer spawns a command shell application that may trigger your 
host-based detection software, which causes the installation to fail. 
Note
You must be administrator to install IME.
To install IME, follow these steps:
Step 1
Download the IME executable file (both IME-6.1.1.exe and IME-6.2.1.exe support IPS 6.1(3)E3) to your 
computer, or start IDM in a browser window, and under Cisco IPS Manager Express, click download to 
install the IME executable file.
Step 2
Double-click the executable file. The Cisco IPS Manager Express - InstallShield Wizard appears.
Step 3
You receive a warning if you have a previous version of Cisco IPS Event Viewer installed. Acknowledge 
the warning, and exit installation. Remove the older version of IEV, and then continue IME installation.
Step 4
Double-click the executable file.
The Cisco IPS Manager Express - InstallShield Wizard appears. Click Next to start IME installation.
Step 5
Accept the license agreement and click Next.
Step 6
Click Next to choose the destination folder, click Install to install IME, and then click Finish to exit the 
wizard. The Cisco IME and Cisco IME Demo icons are now on your desktop.
Restrictions and Limitations
The following restrictions and limitations apply to Cisco IPS 6.1(3)E3 software and the products that 
run 6.1(3)E3:
For IPS 5.0 and later, you can no longer remove the cisco account. You can disable it using the no 
password cisco
 command, but you cannot remove it. To use the no password cisco command, there 
must be another administrator account on the sensor. Removing the cisco account through the 
service account is not supported. If you remove the cisco account through the service account, the 
sensor most likely will not boot up, so to recover the sensor you must reinstall the sensor system 
image.