Cisco Cisco IPS 4255 Sensor
16
Release Notes for Cisco Intrusion Prevention System 6.1(1)E2
OL-19696-01
Upgrading to Cisco IPS 6.1(1) E2
Step 3
Enter configuration mode.
sensor# configure terminal
Step 4
Upgrade the sensor.
sensor(config)# upgrade url/IPS-engine-E2-req-6.1-1.pkg
The URL points to where the update file is located, for example, to retrieve the update using FTP, enter
the following:
the following:
sensor(config)# upgrade ftp://username@ip_address//directory/IPS-engine-E2-req-6.1-1.pkg
Step 5
Enter the password when prompted.
Enter password: ********
Step 6
Enter
yes
to complete the upgrade.
Note
Installing the E2 engine update does not require the sensor to reboot except for the AIM IPS. For
the duration of the update and subsequent software initialization, IPS inspection is halted and
data bypassed according to the bypass configuration of the sensor.
the duration of the update and subsequent software initialization, IPS inspection is halted and
data bypassed according to the bypass configuration of the sensor.
Note
In some rare instances, the E2 engine upgrade causes the CLI to hang during the install, and
attempts to log in to the sensor CLI fail. Rebooting the sensor restores functionality.
attempts to log in to the sensor CLI fail. Rebooting the sensor restores functionality.
For More Information
For the procedure for locating software on Cisco.com and obtaining an account with cryptographic
privileges, see
privileges, see
IPS 6.1(1)E2 Upgrade Notes and Caveats
The following upgrade notes and caveats apply to IPS 6.1(1)E2:
•
If you are using automatic upgrade with the AIM IPS and other IPS appliances or modules, make
sure you put both the minor version upgrade file, IPS-K9-6.1-1-E2.pkg, and the AIM IPS upgrade
file, IPS-AIM-K9-6.1-1-E2.pkg, on the automatic update server so that the AIM IPS can correctly
detect which file needs to be automatically downloaded and installed. If you only put the minor
version upgrade file, IPS-K9-6.1-1-E2.pkg, on the automatic update server, the AIM IPS will
download and try to install it, which is the incorrect file for the AIM IPS.
sure you put both the minor version upgrade file, IPS-K9-6.1-1-E2.pkg, and the AIM IPS upgrade
file, IPS-AIM-K9-6.1-1-E2.pkg, on the automatic update server so that the AIM IPS can correctly
detect which file needs to be automatically downloaded and installed. If you only put the minor
version upgrade file, IPS-K9-6.1-1-E2.pkg, on the automatic update server, the AIM IPS will
download and try to install it, which is the incorrect file for the AIM IPS.
•
To install the IPS-K9-6.1-1-E2.pkg or IPS-AIM-K9-6.1-1-E2.pkg minor version upgrade file, you
must be running IPS version 5.0(1) or later on your sensor. Use IPS-AIM-K9-6.1-1-E2.pkg to
upgrade the AIM IPS only. Use IPS-K9-6.1-1-E2.pkg for all other supported sensors.
must be running IPS version 5.0(1) or later on your sensor. Use IPS-AIM-K9-6.1-1-E2.pkg to
upgrade the AIM IPS only. Use IPS-K9-6.1-1-E2.pkg for all other supported sensors.
•
When you upgrade the AIM IPS using manual upgrade, you must disable heartbeat reset on the
router before installing the upgrade. You can reenable heartbeat reset after you complete the
upgrade. If you do not disable heartbeat reset, the upgrade can fail and leave the AIM IPS in an
unknown state, which can require a system reimage to recover.
router before installing the upgrade. You can reenable heartbeat reset after you complete the
upgrade. If you do not disable heartbeat reset, the upgrade can fail and leave the AIM IPS in an
unknown state, which can require a system reimage to recover.
•
After you upgrade any IPS software on your sensor, you must restart the IDM to see the latest
software features.
software features.