backup IPS software to TFTP

Answered Question
May 2nd, 2007
User Badges:

on my ASA5520 AIP-SSM-10 module how do i backup IPS (v5.0) software to my TFTP server ???


cause i need to reimage a testASA with that IPS software.

Correct Answer by marcabal about 10 years 2 months ago

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.


So instead you would need to download the software from Cisco's website.


Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/


When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/


If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img


BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img


Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373


BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (4 ratings)
Loading.
Correct Answer
marcabal Thu, 05/03/2007 - 07:57
User Badges:
  • Cisco Employee,

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.


So instead you would need to download the software from Cisco's website.


Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/


When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/


If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img


BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img


Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373


BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

a.shaukat Mon, 05/07/2007 - 21:55
User Badges:

thanks so much dude.. that is really helpful.. i guess il just have to beg my vendor to download the fotware for us... :p


Just one more thing ... u said..


"BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well. "


will it wipe off my IPS module configuration or the running startup config of the ASA as well ???


please do let me know cause this would be a problem..


cause i can afford to wipe off the SSM module config but NOT the Device config at all....


thanks again :-)..

mfreijser Tue, 05/08/2007 - 04:09
User Badges:
  • Bronze, 100 points or more

It will only erase the IPS module configuration, not the ASA running/startup configuration.


Managing the module is completly standalone from the ASA itself.


Please rate if the post helps!


Regards,


Michael

Actions

This Discussion