cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1120
Views
15
Helpful
3
Replies

backup IPS software to TFTP

a.shaukat
Level 1
Level 1

on my ASA5520 AIP-SSM-10 module how do i backup IPS (v5.0) software to my TFTP server ???

cause i need to reimage a testASA with that IPS software.

1 Accepted Solution

Accepted Solutions

marcabal
Cisco Employee
Cisco Employee

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.

So instead you would need to download the software from Cisco's website.

Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img

BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img

Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373

BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

View solution in original post

3 Replies 3

marcabal
Cisco Employee
Cisco Employee

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.

So instead you would need to download the software from Cisco's website.

Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img

BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img

Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373

BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

thanks so much dude.. that is really helpful.. i guess il just have to beg my vendor to download the fotware for us... :p

Just one more thing ... u said..

"BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well. "

will it wipe off my IPS module configuration or the running startup config of the ASA as well ???

please do let me know cause this would be a problem..

cause i can afford to wipe off the SSM module config but NOT the Device config at all....

thanks again :-)..

It will only erase the IPS module configuration, not the ASA running/startup configuration.

Managing the module is completly standalone from the ASA itself.

Please rate if the post helps!

Regards,

Michael

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card