Hi,

Thanks for reply.

What do you mean " normal software update" ?

What SYS image does/includes?

Hi,

It's probably best illustrated by example:

Say you buy an ASA with an IPS module already installed with version 6.0. OK, everything is working fine but you notice that software version 6.1 has been released. To upgrade to 6.1 all you need to do is install the upgrade (the "pkg" file). This gives you the new version and keeps all your settings, etc, intact.

Normally, that's all there is to it, but if you have something really bad happen (typically a hard disk failure or something like that) then after the new disk has been installed you'll need the image file (the "img" file). This will format the hard disk, and install both the OS and whatever software version is in the image. You'll then have to restore all your settings from scratch.

It's similar to the difference between installing a windows service pack and reinstalling the whole OS from the CD.

HTH

Andrew.

Hi. Thanks for detailed info.

So why AIP-SSM didn't allowed me to install .img file? Or it can be happen only from rommon mode?

AS i understood we can reimage whole Sensor if we connected by console?

Then how we can apply .img file to AIP-SSM? (AIP-SSM doesn't have any console port)

Leo

It is done using commands in the ASA CLI.

This is documented in the CLI User's Guide:

http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_system_images.html#wp1230355

Updated URL to working (and modern) replacement.