Cisco Cisco IPS 4255 Sensor

IPS 6.0(6)E4 denies high risk events by default. This is a change from 5.x. To change the default, 
edit the event action override for the deny packet inline action and configure it to be disabled.

After you upgrade to 6.0(6)E4, you cannot downgrade using the downgrade command. If you want 
to return to the previous version, you must reimage and then copy the backup configuration from a 
remote server to the reimaged sensor. 

If you install an update on your sensor and the sensor is unusable after it reboots, you must reimage 
your sensor. You can reimage your sensor in the following ways:

For all sensors, use the recover command.

For the IPS 4240, IPS 4255, IPS 4260, and IPS 4270-20, use the ROMMON to restore the 
system image.

For the AIM IPS, use the bootloader.

For the IDSM2, reimage the application partition from the maintenance partition.

For the AIP SSM, reimage from the adaptive security appliance using the hw-module module 
1 recover configure/boot command.

When you install the system image for your sensor, all accounts are removed and the default account and 
password are reset to cisco.

For more information on running the setup command, refer to 

For the procedure for disabling and enabling heartbeat reset on the AIM IPS, refer to 

.

For more information on reimaging sensors, refer to 

For the procedure for obtaining and installing the license, see 

.

For more information on configuring event action overrides, for the CLI refer to 

, and for IDM refer to 

For the procedure for copying the backup configuration to the reimaged sensor, see 

You must log in to Cisco.com using an account with cryptographic privileges to download software. The 
first time you download software on Cisco.com, you receive instructions for setting up an account with 
cryptographic privileges. 

Do not change the filename. You must preserve the original filename for the sensor to accept the update.