Cisco Cisco IPS 4255 Sensor 릴리즈 노트
15
Release Notes for Cisco Intrusion Prevention System 7.0(6)E4
OL-25700-01
Upgrading to Cisco IPS
Upgrading to Cisco IPS
This section provides information on upgrading to Cisco IPS 7.0(6)E4, and contains the following
topics:
topics:
•
•
Upgrade Notes and Caveats
The following upgrade notes and caveats apply to upgrading your sensor to IPS 7.0(6)E4:
•
This service pack contains the S549 signature level.
•
You cannot uninstall IPS 7.0(6)E4. To revert to your previous version, you must reimage the sensor
using the system image file, which causes all configuration settings to be lost.
using the system image file, which causes all configuration settings to be lost.
•
You must have a valid Cisco Service for IPS Maintenance contract per sensor to receive and use
software upgrades from Cisco.com.
software upgrades from Cisco.com.
•
The minimum required version for upgrading to 7.0(6)E4 is 5.1(6)E3 or later.
•
After you upgrade any IPS software on your sensor, you must restart the IDM to see the latest
software features.
software features.
•
For supported sensors, use the IPS-K9-7.0-6-E4.pkg upgrade file. Use the following specific files
for these platforms:
for these platforms:
–
For the AIM IPS, use IPS-AIM-K9-7.0-6-E4.pkg
–
For the NME IPS, use IPS-NME-K9-7.0-6-E4.pkg
•
Using automatic update:
–
If you are using automatic update with a mixture of AIM IPS, NME IPS, and other IPS
appliances or modules, make sure you put both the 7.0(6)E4 upgrade file
(IPS-K9-7.0-6-E4.pkg), the AIM IPS upgrade file (IPS-AIM-K9-7.0-6-E4.pkg), and the
NME IPS upgrade file (IPS-NME-K9-7.0-6-E4.pkg) on the automatic update server so that the
AIM IPS and NME IPS can correctly detect which file needs to be automatically downloaded
and installed. If you only put the 7.0(6)E4 upgrade file (IPS-K9-7.0-6-E4.pkg) on the server, the
AIM IPS and NME IPS will download and try to install the wrong file.
appliances or modules, make sure you put both the 7.0(6)E4 upgrade file
(IPS-K9-7.0-6-E4.pkg), the AIM IPS upgrade file (IPS-AIM-K9-7.0-6-E4.pkg), and the
NME IPS upgrade file (IPS-NME-K9-7.0-6-E4.pkg) on the automatic update server so that the
AIM IPS and NME IPS can correctly detect which file needs to be automatically downloaded
and installed. If you only put the 7.0(6)E4 upgrade file (IPS-K9-7.0-6-E4.pkg) on the server, the
AIM IPS and NME IPS will download and try to install the wrong file.
–
When you upgrade the AIM IPS or NME IPS using automatic update, you must disable
heartbeat reset on the router before placing the upgrade file on your automatic update server.
After the AIM IPS and NME IPS have been automatically updated, you can reenable heartbeat
reset. If you do not disable heartbeat reset, the update can fail and leave the AIM IPS and NME
IPS in an unknown state, which can require a system reimage to recover.
heartbeat reset on the router before placing the upgrade file on your automatic update server.
After the AIM IPS and NME IPS have been automatically updated, you can reenable heartbeat
reset. If you do not disable heartbeat reset, the update can fail and leave the AIM IPS and NME
IPS in an unknown state, which can require a system reimage to recover.
–
If you are using automatic update from an FTP or SCP server with a mixture of platforms that
are supported by IPS 7.0(6)E4 as well as platforms that are not supported by IPS 7.0(6)E4, we
recommend that you create a separate automatic update directory for the IPS 7.0(6)E4 files.
Modify the automatic update configuration for sensors supporting IPS 7.0(6)E4 to point to the
new directory. Placing the IPS 7.0(6)E4 files in the automatic update directory for those sensors
not supporting IPS 7.0(6)E4 results in those sensors constantly downloading the update and
generating errors during the attempted update.
are supported by IPS 7.0(6)E4 as well as platforms that are not supported by IPS 7.0(6)E4, we
recommend that you create a separate automatic update directory for the IPS 7.0(6)E4 files.
Modify the automatic update configuration for sensors supporting IPS 7.0(6)E4 to point to the
new directory. Placing the IPS 7.0(6)E4 files in the automatic update directory for those sensors
not supporting IPS 7.0(6)E4 results in those sensors constantly downloading the update and
generating errors during the attempted update.