Cisco Cisco IPS 4255 Sensor 릴리즈 노트

다운로드
페이지 44
 
17
Release Notes for Cisco Intrusion Prevention System 7.0(2)E3
OL-20115-01
  Upgrading to Cisco IPS 7.0(2)E3
Upgrading to Cisco IPS 7.0(2)E3
This section provides information on upgrading to Cisco IPS 7.0(2)E3, and contains the following 
topics:
Upgrade Notes and Caveats
The following upgrade notes and caveats apply to upgrading your sensor to IPS 7.0(2)E3:
You must have a valid Cisco Service for IPS Maintenance contract per sensor to receive and use 
software upgrades from Cisco.com.
The minimum required version for upgrading to 7.0(2)E3 is 5.1(6)E3 or later. 
Use IPS-AIM-K9-7.0-2-E3.pkg to upgrade the AIM IPS and IPS-NME-K9-7.0-2-E3 to upgrade the 
NME IPS. For all other supported sensors, use the IPS-K9-7.0-2-E3.pkg upgrade file.
After you upgrade any IPS software on your sensor, you must restart the IDM to see the latest 
software features. 
Using automatic update:
If you are using automatic update with a mixture of the AIM IPS, NME IPS, and other IPS 
appliances or modules, make sure you put both the 7.0(2)E3 upgrade file 
(IPS-K9-7.0-2-E3.pkg), the AIM IPS upgrade file (IPS-AIM-K9-7.0-2-E3.pkg), and the NME 
IPS upgrade file (IPS-NME-K9-7.0-2-E3) on the automatic update server so that the AIM IPS 
and NME IPS can correctly detect which file needs to be downloaded and installed. If you only 
put the 7.0(2)E3 upgrade file (IPS-K9-7.0-2-E3.pkg) on the server, the AIM IPS and NME IPS 
will download and try to install the wrong file.
When you upgrade the AIM IPS or NME IPS using automatic update, you must disable 
heartbeat reset on the router before placing the upgrade file on your automatic update server. 
After the AIM IPS and NME IPS have been automatically updated, you can reenable heartbeat 
reset. If you do not disable heartbeat reset, the upgrade can fail and leave the AIM IPS and NME 
IPS in an unknown state, which can require a system reimage to recover. 
If you are using automatic update from an FTP or SCP server with a mixture of platforms that 
are supported by IPS 7.0(2)E3 as well as platforms that are not supported by IPS 7.0(2)E3, we 
recommend that you create a separate automatic update directory 7.0(2)E3 files. Modify the 
automatic update configuration for sensors supporting IPS 7.0(2)E3 to point to the new 
directory.  Placing the 7.0(2)E3 files in the automatic update directory for those sensors not 
supporting IPS 7.0(2)E3 results in those sensors constantly downloading the update and 
generating errors during the attempted update.
Using manual update:
If you want to manually update your sensor, copy the 7.0(2)E3 update files to the directory on 
the server that your sensor polls for updates. 
When you upgrade the AIM IPS or NME IPS using manual upgrade, you must disable heartbeat 
reset on the router before installing the upgrade. You can reenable heartbeat reset after you 
complete the upgrade. If you do not disable heartbeat reset, the upgrade can fail and leave the 
AIM IPS or NME IPS in an unknown state, which can require a system reimage to recover.