Solved: Need Assistance Upgrading NM-CIDS on Cisco 3845 router.

lei.silva · ‎05-07-2010

Can anyone tell me all the files that I need to upgrade my IDS from 6.0(5)E3 to 6.0(6)E4? I believe I should be able to do this with the hardware I currently have. I don't have the resources to upgrade the router or NM-CIDS module. I want to update to the E4 because it appears Cisco is no longer putting out signatures for the E3. From the documentation I'm reading I will need at least the System Image, the Service Pack, the Recovery Image, and the Engine Update files. I see several different file times that have AIM in the naming convention. I'm uncertain what specific file names I will need.

A show version capture is below.

show version
Application Partition:

Cisco Intrusion Prevention System, Version 6.0(5)E3

Host:
    Realm Keys          key1.0
Signature Definition:
    Signature Update    S479.0                   2010-03-19
    Virus Update        V1.4                     2007-03-02
OS Version:             2.4.30-IDS-smp-bigphys
Platform:               NM-CIDS
Serial Number:          FOC11014468
Licensed, expires:      14-Aug-2010 UTC
Sensor up-time is 17 days.
Using 403263488 out of 509292544 bytes of available memory (79% usage)
system is using 17.7M out of 29.0M bytes of available disk space (61% usage)
application-data is using 34.1M out of 174.7M bytes of available disk space (21% usage)
boot is using 39.1M out of 75.9M bytes of available disk space (54% usage)
application-log is using 532.3M out of 2.8G bytes of available disk space (20% usage)

MainApp          N-2008_JUN_06_02_35    (Release)   2008-06-06T03:23:18-0500   Running
AnalysisEngine   NE-2008_OCT_16_22_05   (Release)   2008-10-16T22:30:37-0500   Running
CLI              N-2008_JUN_06_02_35    (Release)   2008-06-06T03:23:18-0500

Upgrade History:

* IPS-sig-S478-req-E3 18:12:38 UTC Mon Mar 22 2010
IPS-sig-S479-req-E3.pkg 14:00:57 UTC Fri Mar 26 2010

Recovery Partition Version 1.1 - 6.0(5)E3

rhermes · ‎05-07-2010

You only need the IPS-K9-6.0-6-E4.pkg file.

Put it on a FTP server and jump on the sensor CLI and run this command:

upgrade ftp://(username)@(ipaddress of your ftp server)//(directory, if any)/IPS-K9-6.0-6-E4.pkg

- Bob

View solution in original post

rhermes · ‎05-07-2010

From the software download section on CCO, follow this branch:

http://tools.cisco.com/support/downloads/go/Model.x?mdfid=282539293&mdfLevel=Software%20Version/Option&treeName=Security&modelName=Cisco%20IPS%20Sensor%20Software%20Version%206.2&treeMdfId=268438162

Intrusion Prevention System (IPS)

IPS Appliances

Cisco Intrusion Prevention System

Cisco IPS Sensor Software version 6.2

Installation instructions:

http://www.cisco.com/en/US/docs/security/ips/6.0/installation/guide/hwImage.html#wp1142504

- Bob

lei.silva · ‎05-07-2010

I've got the instructions. I needed to know which specific files I need to use. I'm guessing the following:

IPS-NM_CIDS-K9-sys-1.1-a-6.0-6-E4.img as the system image

IPS-K9-6.0-6-E4.pkg as the Service Pack

IPS-K9-r-1.1-a-6.0-6-E4.pkg as the recovery image

IPS-engine-E4-req-6.0-6.pkg as the Engine Update

I've been previously told that I can not go to Cisco IPS Sensor Software version 6.2 because my hardware will not support it.

Can all of these files be updated through the IDM?

rhermes · ‎05-07-2010

You only need the IPS-K9-6.0-6-E4.pkg file.

Put it on a FTP server and jump on the sensor CLI and run this command:

upgrade ftp://(username)@(ipaddress of your ftp server)//(directory, if any)/IPS-K9-6.0-6-E4.pkg

- Bob