Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IDS 4215 inline IPS

Hi

One of our client has an IDS 4215 with 4FE. I don't know what version they are running but I believe it is pretty old... Around 3 years.

What version is required to get the IDS 4215 to work in in-line mode? And what software can be used to manage these device? Do you still have to use CSPM or is there something better?

Does anyone have an example configuration for the IDS 4215 or is there an example config on CCO?

Thanks

2 REPLIES
Cisco Employee

Re: IDS 4215 inline IPS

If you are not interested in keeping the existing configuration, it would be best to re-image to 5.1.1, then apply the service pack, then apply the new signature updates.

Please note that you would need to purchase a license to be able to upgrade with new signatures.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/8492_01.htm#wp1063971

Please read the readme file here for minimum requirements of bios and rom.

http://ftp-sj.cisco.com/cisco/crypto/3DES/ciscosecure/ips/5.x/system/IPS-4215-K9-sys-1.1-a-5.1-1.txt

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/8492_01.htm

Image files are here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5-system

Firmware/Bios files are here:

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5-firmware

After installing the 5.1.1 image, please install the 5.1.4 service pack.

And then install the latest signature upgrade.

The main page for the sensor files is here:

http://www.cisco.com/kobayashi/sw-center/ciscosecure/ids/crypto/

You can use IDM (GUI) to manage the sensor. It gets installed as part of the reimage.

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids12/idmguide/index.htm

There are is a good guide in configuring here:

http://www.cisco.com/web/learning/le31/le29/configuring_ips_4200_series_sensors.html

I hope this information helps you.

Regards

Cisco Employee

Re: IDS 4215 inline IPS

Hi,

You can reimage the sensor straight to 5.1(4) code. You do not need to reimage to 5.1(1) then upgrade.

File can be found here.

http://www.cisco.com/cgi-bin/tablebuild.pl/ips5-system

File for 4215: IPS-4215-K9-sys-1.1-a-5.1-4.img

Readme: IPS-5.1-4.readme.txt

Thank you.

Edward

142
Views
3
Helpful
2
Replies
CreatePlease login to create content