Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

can't get IPS-SSM-10 to download updates from FTP server

Dear Support,

Wondering if anyone can help me, but have a problem with two ASA5520 each with an AIP-SSM-10 module downloading the updates via FTP.

I have the ASA5520’s configured in an active/passive failover, with two DMZs, the front end and a backend. The web servers, content switch and AIP are in the front end, and a SQL and FTP box in the backend. The problem I have is that the AIP can’t FTP the updates from FTP box, however if I enable the web servers they are fine and can pull down the files.

It is a Microsoft FTP server, and the only message is that the session timed out from the AIP-SSM is recorded on the FTP server.

#Software: Microsoft Internet Information Services 5.0

#Version: 1.0

#Date: 2006-03-07 14:10:43

#Fields: time c-ip cs-method cs-uri-stem sc-status

14:10:43 217.68.68.164 [1]USER anonymous 331

14:10:43 217.68.68.164 [1]PASS password 530

14:11:49 127.0.0.1 [2]USER anonymous 331

14:11:51 127.0.0.1 [2]PASS asdasd 530

14:12:04 127.0.0.1 [2]QUIT - 530

14:12:09 127.0.0.1 [3]USER anonymous 331

14:12:11 127.0.0.1 [3]PASS - 530

14:12:19 127.0.0.1 [3]QUIT - 530

14:12:26 127.0.0.1 [4]USER anonymous 331

14:12:29 127.0.0.1 [4]PASS password 530

14:13:18 127.0.0.1 [4]QUIT - 530

#Software: Microsoft Internet Information Services 5.0

#Version: 1.0

#Date: 2006-03-07 14:13:55

#Fields: time c-ip cs-method cs-uri-stem sc-status

14:13:55 127.0.0.1 [5]USER anonymous 331

14:13:56 127.0.0.1 [5]PASS - 230

14:15:47 127.0.0.1 [5]QUIT - 226

14:34:10 127.0.0.1 [6]USER anonymous 331

14:34:12 127.0.0.1 [6]PASS as 230

14:34:40 127.0.0.1 [6]QUIT - 226

14:35:11 127.0.0.1 [7]USER anonymous 331

14:35:12 127.0.0.1 [7]PASS asd 230

14:35:34 127.0.0.1 [7]QUIT - 226

On the AIP I get the following;

evError: eventId=1136674375485523880 vendor=Cisco severity=error

originator:

hostId: AIP-SSM-10

appName: mainApp

appInstanceId: 281

time: 09 March 2006 12:33:09 UTC offset=0 timeZone=GMT00:00

errorMessage: Failed attempt to get directory listing from remote auto update server: Connect failed name=errSystemError

Please can anyone help me resolve this.

Thanks in advance,

Adrian.

2 REPLIES
New Member

Re: can't get IPS-SSM-10 to download updates from FTP server

try upgrading the ASA software to 7.0.4-8

Silver

Re: can't get IPS-SSM-10 to download updates from FTP server

Were you upgrading using the cli like below:

sensor# conf t

sensor(config)# upgrade ftp://anonymous@1.1.1.1/file

199
Views
0
Helpful
2
Replies
CreatePlease to create content