05-02-2007 02:19 AM - edited 03-10-2019 03:35 AM
on my ASA5520 AIP-SSM-10 module how do i backup IPS (v5.0) software to my TFTP server ???
cause i need to reimage a testASA with that IPS software.
Solved! Go to Solution.
05-03-2007 07:57 AM
When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.
So instead you would need to download the software from Cisco's website.
Here is the main page for IPS software:
http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/
When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".
On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:
http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/
If you really want version 5.0 then you can download and use this file:
IPS-SSM-K9-sys-1.1-a-5.0-2.img
BUT understand that it is a very old version, and new signatures can not be loaded on that old version.
I would recommend instead loading the latest 5.1 version:
IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img
Here are the instructions for installing the System Image file:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373
BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.
If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:
To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:
http://www.cisco.com/cgi-bin/tablebuild.pl/ips5
IPS-K9-5.1-5-E1.pkg
Using these upgrade instructions:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238
You can then get a license (you will need a service contract)
And install the latest Signature Update from here:
05-03-2007 07:57 AM
When the software is installed on the SSM it is unpackaged and expanded on to the sensor's compact flash. It does not exist on the SSM as a single file. So you can't copy the software Off of the SSM.
So instead you would need to download the software from Cisco's website.
Here is the main page for IPS software:
http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/
When trying to re-image an SSM and don't care what was on there previoulsy, then you will want to use a "System Image".
On the main IPS software page look for the Version 5.x section, then look for the System and Recovery Images section, and then click on the AIP-SSM link. It will take you to this page:
http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/
If you really want version 5.0 then you can download and use this file:
IPS-SSM-K9-sys-1.1-a-5.0-2.img
BUT understand that it is a very old version, and new signatures can not be loaded on that old version.
I would recommend instead loading the latest 5.1 version:
IPS-SSM-K9-sys-1.1-a-5.1-5-E1.img
Here are the instructions for installing the System Image file:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1032373
BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well.
If you are wanting to "UPGRADE" rather than do a complete re-image, then do not use the System Image installation process, and instead use the uprgade files and install with the upgrade process:
To get to the latest 5.1 version get the latest 5.1(5)E1 upgrade from here:
http://www.cisco.com/cgi-bin/tablebuild.pl/ips5
IPS-K9-5.1-5-E1.pkg
Using these upgrade instructions:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/cliguide/cliimage.htm#wp1064238
You can then get a license (you will need a service contract)
And install the latest Signature Update from here:
05-07-2007 09:55 PM
thanks so much dude.. that is really helpful.. i guess il just have to beg my vendor to download the fotware for us... :p
Just one more thing ... u said..
"BUT be aware that a System Image installation will wipe out all of your configuration on the SSM as well. "
will it wipe off my IPS module configuration or the running startup config of the ASA as well ???
please do let me know cause this would be a problem..
cause i can afford to wipe off the SSM module config but NOT the Device config at all....
thanks again :-)..
05-08-2007 04:09 AM
It will only erase the IPS module configuration, not the ASA running/startup configuration.
Managing the module is completly standalone from the ASA itself.
Please rate if the post helps!
Regards,
Michael
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide