cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
428
Views
0
Helpful
2
Replies

can't get IPS-SSM-10 to download updates from FTP server

aoshea
Level 1
Level 1

Dear Support,

Wondering if anyone can help me, but have a problem with two ASA5520 each with an AIP-SSM-10 module downloading the updates via FTP.

I have the ASA5520’s configured in an active/passive failover, with two DMZs, the front end and a backend. The web servers, content switch and AIP are in the front end, and a SQL and FTP box in the backend. The problem I have is that the AIP can’t FTP the updates from FTP box, however if I enable the web servers they are fine and can pull down the files.

It is a Microsoft FTP server, and the only message is that the session timed out from the AIP-SSM is recorded on the FTP server.

#Software: Microsoft Internet Information Services 5.0

#Version: 1.0

#Date: 2006-03-07 14:10:43

#Fields: time c-ip cs-method cs-uri-stem sc-status

14:10:43 217.68.68.164 [1]USER anonymous 331

14:10:43 217.68.68.164 [1]PASS password 530

14:11:49 127.0.0.1 [2]USER anonymous 331

14:11:51 127.0.0.1 [2]PASS asdasd 530

14:12:04 127.0.0.1 [2]QUIT - 530

14:12:09 127.0.0.1 [3]USER anonymous 331

14:12:11 127.0.0.1 [3]PASS - 530

14:12:19 127.0.0.1 [3]QUIT - 530

14:12:26 127.0.0.1 [4]USER anonymous 331

14:12:29 127.0.0.1 [4]PASS password 530

14:13:18 127.0.0.1 [4]QUIT - 530

#Software: Microsoft Internet Information Services 5.0

#Version: 1.0

#Date: 2006-03-07 14:13:55

#Fields: time c-ip cs-method cs-uri-stem sc-status

14:13:55 127.0.0.1 [5]USER anonymous 331

14:13:56 127.0.0.1 [5]PASS - 230

14:15:47 127.0.0.1 [5]QUIT - 226

14:34:10 127.0.0.1 [6]USER anonymous 331

14:34:12 127.0.0.1 [6]PASS as 230

14:34:40 127.0.0.1 [6]QUIT - 226

14:35:11 127.0.0.1 [7]USER anonymous 331

14:35:12 127.0.0.1 [7]PASS asd 230

14:35:34 127.0.0.1 [7]QUIT - 226

On the AIP I get the following;

evError: eventId=1136674375485523880 vendor=Cisco severity=error

originator:

hostId: AIP-SSM-10

appName: mainApp

appInstanceId: 281

time: 09 March 2006 12:33:09 UTC offset=0 timeZone=GMT00:00

errorMessage: Failed attempt to get directory listing from remote auto update server: Connect failed name=errSystemError

Please can anyone help me resolve this.

Thanks in advance,

Adrian.

2 Replies 2

r-simpson
Level 3
Level 3

try upgrading the ASA software to 7.0.4-8

jwalker
Level 3
Level 3

Were you upgrading using the cli like below:

sensor# conf t

sensor(config)# upgrade ftp://anonymous@1.1.1.1/file

Review Cisco Networking products for a $25 gift card