Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

backup IPS software to TFTP

on my ASA5520 AIP-SSM-10 module how do i backup IPS (v5.0) software to my TFTP server ???

cause i need to reimage a testASA with that IPS software.

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: backup IPS software to TFTP

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.

So instead you would need to download the software from Cisco's website.

Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img

BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img

Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373

BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

3 REPLIES
Cisco Employee

Re: backup IPS software to TFTP

When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.

So instead you would need to download the software from Cisco's website.

Here is the main page for IPS software:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".

On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

If you really want version 5.0 then you can download and use this file:

IPS-SSM-K9-sys-1.1-a-5.0-2.img

BUT understand that it is a very old version, and new signatures can not be loaded on that old version.

I would recommend instead loading the latest 5.1 version:

IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img

Here are the instructions for installing the System Image file:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373

BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.

If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:

To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5

IPS-K9-5.1-5-E1.pkg

Using these upgrade instructions:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238

You can then get a license (you will need a service contract)

And install the latest Signature Update from here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-sigup

New Member

Re: backup IPS software to TFTP

thanks so much dude.. that is really helpful.. i guess il just have to beg my vendor to download the fotware for us... :p

Just one more thing ... u said..

"BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well. "

will it wipe off my IPS module configuration or the running startup config of the ASA as well ???

please do let me know cause this would be a problem..

cause i can afford to wipe off the SSM module config but NOT the Device config at all....

thanks again :-)..

Bronze

Re: backup IPS software to TFTP

It will only erase the IPS module configuration, not the ASA running/startup configuration.

Managing the module is completly standalone from the ASA itself.

Please rate if the post helps!

Regards,

Michael

782
Views
15
Helpful
3
Replies