Hi

Can i directly go for that or i need to go for earlier 6.0 versions and then the latest?

Regards

Ankur

Just to add on to what these guys are saying, be very aware of the listed bugs. You may find something that requires you from moving forward in the service packs until it gets fixed.

Other than that, these two guys hit it on the head. Update and be happy!

Hi marcabal

This was one particular conversation which we were discussing few days back. I would like to have your views on the following

We are having IPS 5.0(2) module in ASA firewall and this IPS software version doesnot have Engine E1 and hence cann't be updated with latest signature updates. Also since engine E2 has also released recently , iwould like this version to be upgraded to the latest one . Hence , can you please let me know if 5.0(2) can be directly upgraded to 6.x(x)E1 or 6.x(x)E2

Regards

Ankur

This is from the E2 update readme:

"The sensor must report its version as 5.1(7)E1, 6.0(4)E1, or 6.1(1)E1

before you can apply the E2 Engine Update package appropriate to your

version. To determine the current sensor version, log in to the CLI and

type the following command at the prompt:

show version

If a Service Pack is required to update your sensor to one of the

supported releases, consider installing the 5.1(8)E2 or 6.0(5)E2 Service

Pack or the 6.1(1)E2 Minor Update. This will eliminate the need for the

E2 Engine Upgrade, as the functionality is built-in to those, and later,

updates."

Regards

Farrukh

hi happs

thanks for the update .i would also like to know that i have set bypass mode to "Auto" and whether during upgradation only the analysis engine will be down and traffic will continue to flow smoothly (without being inspected) ?.The reason as to why i am asking the same is to confirm that during upgradation the normal network traffic will flow unhindered

Also let me know if i can put the IPS into promiscous mode as an additional precaution ; thereby ensuring that in case of hardware (sensor box) down the traffic will continue to flow smoothly

Regards

Ankur

I 'think' the Auto should do the trick. But the upgrade would need a restart, so you need to schedule a downtime anyway. So the question is? Does the 'Auto' really help in your case?

Regards

Farrukh

hi

I would like to ask if setting the ASA traffic to IPS can be set to Promiscous mode so that the chances of traffic getting diverted to IPS is removed completely and network flow is smooth

After upgradation , we can put back "ASA to IPS packet flow" to Inline .Please suggest

Ankur

Oh its an ASA AIP here, then I think you can use this approach to be on the 'safe side'.

Regards

Farrukh

hi happs

i tried updating with the version you have mentioned i.e 5.0(2) to E1 ;however it gave an error (attached).Please let me know the exact meaning of the same

Regards

Ankur

Which image exactly are you trying?

Regards

Farrukh

hi happs

i am trying to upgrade to 5.1(7) first ,also attached is the snapshot in the previous mail

Ankur