S363 Signature Update

Unanswered Question

We have 4 Cisco ASA-SSM-AIP modules that need the new signature set applied. We are getting an error trying to ftp the upgrade to the console of these devices. "Error: execUpgradeSoftware : Received only partial file: 131072 bytes". We have downloaded the S363 version multiple times to no avail. Are we missing something? It appears as if the download is corrupt but we have verified the file size with the original. We have tried the upgrade on all four and it fails on each one.

The show version:

DOR-DMZ-SSM-1# show ver

Application Partition:

Cisco Intrusion Prevention System, Version 6.1(1)E2

Host:

Realm Keys key1.0

Signature Definition:

Signature Update S361.0 2008-10-13

Virus Update V1.4 2007-03-02

OS Version: 2.4.30-IDS-smp-bigphys

Platform: ASA-SSM-10

Serial Number: JAB101701BR

Licensed, expires: 31-Jul-2009 UTC

Sensor up-time is 162 days.

Using 673341440 out of 1032495104 bytes of available memory (65% usage)

system is using 17.7M out of 29.0M bytes of available disk space (61% usage)

application-data is using 49.7M out of 166.8M bytes of available disk space (31% usage)

boot is using 40.5M out of 68.6M bytes of available disk space (62% usage)

MainApp M-2008_APR_24_19_16 (Release) 2008-04-24T19:49:05-0500 Running

AnalysisEngine ME-2008_JUN_05_18_26 (Release) 2008-06-05T18:55:02-0500 Running

CLI M-2008_APR_24_19_16 (Release) 2008-04-24T19:49:05-0500

Upgrade History:

* IPS-sig-S360-req-E2 10:30:12 UTC Tue Oct 14 2008

IPS-sig-S361-req-E2.pkg 14:33:47 UTC Tue Oct 14 2008

Recovery Partition Version 1.1 - 6.1(1)E1

Host Certificate Valid from: 14-Feb-2007 to 14-Feb-2009

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Farrukh Haroon Fri, 10/24/2008 - 21:23

Verify your downloaded file using a MD5 checker once you've download it and don't merely rely on comparing the byte size. Many freeware MD5 checkers are available on google. Sometimes proxies cache the file and you keep downloading the same file again and again (even tough you are re-downloading). Sometimes this can be evaded by changing the filename of the downloaded file (then rename it back).

Also try to use a different FTP server to rule out any issues there (FileZilla is a nice and free one).

Regards

Farrukh

1000106020 Sat, 10/25/2008 - 18:07

When I try to update the IPS signatures through the SDM wizard, on the download page, after entering my username and password for the cisco.com site, I get the following error:

--------------

SDM IPS Download - Error

Could not download IPS signature package from Cisco.com.

Please try again later.

------------------------

Urfan Khaliq Mon, 01/10/2011 - 08:08

Hi I have downloaded the latest signature file (.pkg) format as my IPS sensors do not have access to the Internet...

Can someone explain where in SDM I need to go in order to update the signatures? I have seen within the Configuration tab > IPS > and at the bottom of the left hand menu there is "Update Sensor" and this allows you to direct the gui to a file located on the client or on an FTP server...

Is this "update" referring to a signature update or a software update?

Actions

This Discussion