I'm trying to upgrade from Cisco Intrusion Prevention System, Version 6.0(3)E1 to Version 6.04(a)E1. The downloads from The Software Download Resource site is in .pkg format. The Configuration guide for IPS says to install image with a .bin.gz format. How do I reconcile this discrepancy?
There are 2 types of files, and you are seeing information about both types.
The first type are "Upgrades". These files can be used to upgrade from an older version to a newer version, and will automatically convert your configuration to work with the new version.
These files end .pkg and are installed through one of the following methods:
1) The sensor CLI upgrade command.
2) Automatic updates
3) Through IDM
4) Through CSM
Here are the directions for "upgrading" the sensor:
I would recommend installing 6.0(5)E2 instead of 6.0(4a)E1. You can upgrade directly from 6.0(3)E1 to 6.0(5)E2 using this file:
(You might even consider going to 6.1(1)E2)
NOTE: The same upgrade file works across ALL sensor platforms (including the IDSM-2) with the exception of the AIM-IPS Router IPS Module (it has a special upgrade file).
The other type of file is a System Image.
A System Image does not actually upgrade, instead it reformats the drive and installs everything to make it loko like a new sensor at that version.
I recommend only using System Images when you want you config to be completely deleted, or if you need to do disaster recovery because of a corrupted sensor.
The System Images are the ones that end of .bin.gz.
Here are the installation instructions for System Images for the IDSM-2:
The file is:
(There is a separate System Image for every type of sensor)
I recommend you install an "upgrade" file, and not a System Image file.