Upgrading from 5.1(7) E1 to 6.1

Answered Question
May 14th, 2008
User Badges:

I know I need to upgrade to 6.0(1)E1 then to 6.1, but in the instructions say to do the upgrade via the CLI. This isn't a problem, but I was wondering if I can do the upgrade via the ASDM through the IPS update sensor instead.

Correct Answer by marcabal about 9 years 2 weeks ago

Looks like you have SNMP enabled on your sensor.


In version 5.1 the community strings had default values, but this was considered a possible vulnerability since the community strings are considered as passwords. So in version 6.0 and above there are no more default values for the community strings.


If you are not using SNMP then just disable it, and try the upgrade again.


If you do use SNMP, then decide what community strings you want to use specifically for your site, and configure them on the 5.1 sensor.

(NOTE: If you want to keep the default values, then just type the actual values into the field using the CLI. They will then be considered user configured, and can be carried forward into version 6.0).

Once your community strings are configured then try the upgrade again.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
marcabal Wed, 05/14/2008 - 05:24
User Badges:
  • Cisco Employee,

Yes you can update through ASDM (or IDM).


But you do not have to upgrade to 6.0(1)E1 first.

So long as your sensor is version 5.0(1) or higher, you can upgrade directly to 6.1(1)E1 with the "upgrade" file:

IPS-K9-6.1-1-E1.pkg

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6


Correct Answer
marcabal Wed, 05/14/2008 - 06:31
User Badges:
  • Cisco Employee,

Looks like you have SNMP enabled on your sensor.


In version 5.1 the community strings had default values, but this was considered a possible vulnerability since the community strings are considered as passwords. So in version 6.0 and above there are no more default values for the community strings.


If you are not using SNMP then just disable it, and try the upgrade again.


If you do use SNMP, then decide what community strings you want to use specifically for your site, and configure them on the 5.1 sensor.

(NOTE: If you want to keep the default values, then just type the actual values into the field using the CLI. They will then be considered user configured, and can be carried forward into version 6.0).

Once your community strings are configured then try the upgrade again.


Actions

This Discussion