Need Assistance Upgrading NM-CIDS on Cisco 3845 router.

Answered Question
May 7th, 2010

Can anyone tell me all the files that I need to upgrade my IDS from 6.0(5)E3 to 6.0(6)E4?  I believe I should be able to do this with the hardware I currently have.  I don't have the resources to upgrade the router or NM-CIDS module.  I want to update to the E4 because it appears Cisco is no longer putting out signatures for the E3.  From the documentation I'm reading I will need at least the System Image, the Service Pack, the Recovery Image, and the Engine Update files.  I see several different file times that have AIM in the naming convention.  I'm uncertain what specific file names I will need.

A show version capture is below.

show version
Application Partition:

Cisco Intrusion Prevention System, Version 6.0(5)E3

Host:                                                        
    Realm Keys          key1.0                               
Signature Definition:                                        
    Signature Update    S479.0                   2010-03-19  
    Virus Update        V1.4                     2007-03-02  
OS Version:             2.4.30-IDS-smp-bigphys               
Platform:               NM-CIDS                              
Serial Number:          FOC11014468                          
Licensed, expires:      14-Aug-2010 UTC                      
Sensor up-time is 17 days.
Using 403263488 out of 509292544 bytes of available memory (79% usage)
system is using 17.7M out of 29.0M bytes of available disk space (61% usage)
application-data is using 34.1M out of 174.7M bytes of available disk space (21% usage)
boot is using 39.1M out of 75.9M bytes of available disk space (54% usage)
application-log is using 532.3M out of 2.8G bytes of available disk space (20% usage)


MainApp          N-2008_JUN_06_02_35    (Release)   2008-06-06T03:23:18-0500   Running  
AnalysisEngine   NE-2008_OCT_16_22_05   (Release)   2008-10-16T22:30:37-0500   Running  
CLI              N-2008_JUN_06_02_35    (Release)   2008-06-06T03:23:18-0500           

Upgrade History:

* IPS-sig-S478-req-E3       18:12:38 UTC Mon Mar 22 2010  
  IPS-sig-S479-req-E3.pkg   14:00:57 UTC Fri Mar 26 2010 

Recovery Partition Version 1.1 - 6.0(5)E3

I have this problem too.
0 votes
Correct Answer by rhermes about 6 years 7 months ago

You only need the IPS-K9-6.0-6-E4.pkg file.

Put it on a FTP server and jump on the sensor CLI and run this command:

upgrade ftp://(username)@(ipaddress of your ftp server)//(directory, if any)/IPS-K9-6.0-6-E4.pkg 

- Bob

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
rhermes Fri, 05/07/2010 - 11:44

From the software download section on CCO, follow this branch:

http://tools.cisco.com/support/downloads/go/Model.x?mdfid=282539293&mdfLevel=Software%20Version/Option&treeName=Security&modelName=Cisco%20IPS%20Sensor%20Software%20Version%206.2&treeMdfId=268438162

Intrusion Prevention System (IPS)

     IPS Appliances

          Cisco Intrusion Prevention System

               Cisco IPS Sensor Software version 6.2

Installation instructions:

http://www.cisco.com/en/US/docs/security/ips/6.0/installation/guide/hwImage.html#wp1142504

- Bob

lei.silva Fri, 05/07/2010 - 12:35

I've got the instructions.  I needed to know which specific files I need to use.  I'm guessing the following:

IPS-NM_CIDS-K9-sys-1.1-a-6.0-6-E4.img as the system image

IPS-K9-6.0-6-E4.pkg                               as the Service Pack

IPS-K9-r-1.1-a-6.0-6-E4.pkg                     as the recovery image

IPS-engine-E4-req-6.0-6.pkg                    as the Engine Update

I've been previously told that I can not go to Cisco IPS Sensor Software version 6.2 because my hardware will not support it.

Can all of these files be updated through the IDM?

Correct Answer
rhermes Fri, 05/07/2010 - 15:07

You only need the IPS-K9-6.0-6-E4.pkg file.

Put it on a FTP server and jump on the sensor CLI and run this command:

upgrade ftp://(username)@(ipaddress of your ftp server)//(directory, if any)/IPS-K9-6.0-6-E4.pkg 

- Bob

Actions

This Discussion