Cisco Cisco IPS 4255 Sensor 릴리즈 노트
17
Release Notes for Cisco Intrusion Prevention System 6.1(1)E3
OL-19697-01
Upgrading to Cisco IPS 6.1(1) E3
The URL points to where the update file is located, for example, to retrieve the update using FTP, enter
the following:
the following:
sensor(config)# upgrade ftp://username@ip_address//directory/IPS-engine-E3-req-6.1-1.pkg
Step 5
Enter the password when prompted.
Enter password: ********
Step 6
Enter
yes
to complete the upgrade.
Note
Installing the E3 engine update does not require the sensor to reboot except for the AIM IPS. For
the duration of the update and subsequent software initialization, IPS inspection is halted and
data bypassed according to the bypass configuration of the sensor.
the duration of the update and subsequent software initialization, IPS inspection is halted and
data bypassed according to the bypass configuration of the sensor.
Note
In some rare instances, the E3 engine upgrade causes the CLI to hang during the install, and
attempts to log in to the sensor CLI fail. Rebooting the sensor restores functionality.
attempts to log in to the sensor CLI fail. Rebooting the sensor restores functionality.
For More Information
For the procedure for locating software on Cisco.com and obtaining an account with cryptographic
privileges, see
privileges, see
.
IPS 6.1(1)E3 Upgrade Notes and Caveats
The following upgrade notes and caveats apply to IPS 6.1(1)E3:
•
If you are using automatic upgrade with the AIM IPS, NME IPS, and other IPS appliances or
modules, make sure you put both the minor version upgrade file, IPS-K9-6.1-1-E3.pkg, the AIM IPS
upgrade file, IPS-AIM-K9-6.1-1-E3.pkg, and the NME IPS upgrade file,
IPS-NME-K9-6.1-1-E3.pkg, on the automatic update server so that the AIM IPS and NME IPS can
correctly detect which file needs to be automatically downloaded and installed. If you only put the
minor version upgrade file, IPS-K9-6.1-1-E2.pkg, on the automatic update server, the AIM IPS and
NME IPS will download and try to install it, which is the incorrect file for the AIM IPS and
NME IPS.
modules, make sure you put both the minor version upgrade file, IPS-K9-6.1-1-E3.pkg, the AIM IPS
upgrade file, IPS-AIM-K9-6.1-1-E3.pkg, and the NME IPS upgrade file,
IPS-NME-K9-6.1-1-E3.pkg, on the automatic update server so that the AIM IPS and NME IPS can
correctly detect which file needs to be automatically downloaded and installed. If you only put the
minor version upgrade file, IPS-K9-6.1-1-E2.pkg, on the automatic update server, the AIM IPS and
NME IPS will download and try to install it, which is the incorrect file for the AIM IPS and
NME IPS.
•
To install the IPS-K9-6.1-1-E3.pkg, IPS-AIM-K9-6.1-1-E3.pkg, or IPS-NME-K9-6.1-1-E3.pkg
minor upgrade file, you must be running IPS version 5.0(1) or later on your sensor. Use
IPS-AIM-K9-6.1-1-E2.pkg to upgrade the AIM IPS only. Use IPS-NME-K9-6.1-1-E3.pkg to
upgrade the NME IPS only. Use IPS-K9-6.1-1-E2.pkg for all other supported sensors.
minor upgrade file, you must be running IPS version 5.0(1) or later on your sensor. Use
IPS-AIM-K9-6.1-1-E2.pkg to upgrade the AIM IPS only. Use IPS-NME-K9-6.1-1-E3.pkg to
upgrade the NME IPS only. Use IPS-K9-6.1-1-E2.pkg for all other supported sensors.
•
When you upgrade the AIM IPS and NME IPS using manual upgrade, you must disable heartbeat
reset on the router before installing the upgrade. You can reenable heartbeat reset after you complete
the upgrade. If you do not disable heartbeat reset, the upgrade can fail and leave the AIM IPS and
NME IPS in an unknown state, which can require a system reimage to recover.
reset on the router before installing the upgrade. You can reenable heartbeat reset after you complete
the upgrade. If you do not disable heartbeat reset, the upgrade can fail and leave the AIM IPS and
NME IPS in an unknown state, which can require a system reimage to recover.
•
After you upgrade any IPS software on your sensor, you must restart the IDM to see the latest
software features.
software features.