backup IPS software to TFTP

Answered Question
May 2nd, 2007

on my ASA5520 AIP-SSM-10 module how do i backup IPS (v5.0) software to my TFTP server ???

cause i need to reimage a testASA with that IPS software.

I have this problem too.
0 votes
Correct Answer by marcabal about 9 years 7 months ago

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.

So instead you would need to download the software from Cisco's website.

Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img

BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img

Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373

BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (4 ratings)
Loading.
Correct Answer
marcabal Thu, 05/03/2007 - 07:57

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.

So instead you would need to download the software from Cisco's website.

Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img

BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img

Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373

BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

a.shaukat Mon, 05/07/2007 - 21:55

thanks so much dude.. that is really helpful.. i guess il just have to beg my vendor to download the fotware for us... :p

Just one more thing ... u said..

"BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well. "

will it wipe off my IPS module configuration or the running startup config of the ASA as well ???

please do let me know cause this would be a problem..

cause i can afford to wipe off the SSM module config but NOT the Device config at all....

thanks again :-)..

mfreijser Tue, 05/08/2007 - 04:09

It will only erase the IPS module configuration, not the ASA running/startup configuration.

Managing the module is completly standalone from the ASA itself.

Please rate if the post helps!

Regards,

Michael

Actions

This Discussion