Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IDS 4 and NRS boxes

We are running a mix of 42x0 and NRS boxes.

One of our NRS boxes has been upgraded to twin PIII/600 processors, 512Mb RAM and has had an IDE disk added and Adaptec card and SCSI disk removed. This behaves similarly to a 4230. It also upgraded to version 4 just fine.

Can someone advise what it is that causes Cisco not to recommend using IDS 4 on NRS boxes? The principal differences we can see are:

- memory (128Mb vs 512Mb)

- processor (2 * PII/400 vs PIII/600)

- Adaptec SCSI card

- SCSI disk vs IDE disk

given RedHat supports all the above, I am a bit confused.

New Member

Re: IDS 4 and NRS boxes

There are a number of reasons Cisco does not recommend or support this type of conversion. Most notably is the Field Notice describing a problem with the IDS-4230 appliances that makes them susceptible to early failure. There is currently a replacement program in place for registered IDS-4230 customers.

Based on the changes you describe above, your modified NRS box is now susceptible to the same early failure. If this occurs, the box will not be covered by a support contract because the modifications are unauthorized.


New Member

Re: IDS 4 and NRS boxes

Could you reference this Field Notice and replacement program with URLs?



New Member

Re: IDS 4 and NRS boxes

Sure. All of the pertinent information is available in the following field notice:


New Member

Re: IDS 4 and NRS boxes

Combining this with bulletin 2166, it seems all NRS boxes will be unsupported beyond 28 Feb 2004.

This brings me back to the issue of what has changed between IDS 3 and 4?

One set of release notes mentions 512Mb - which an NRS will support.

We can change HD from SCSI to IDE.

The above note mentions the second PIII processor in a 4230, although NRS boxes have two PIIs - I presume that the PIIIs pull more power. Does IDS 4 require a PIII - or dual PIIIs?

Any help welcomed - it has already been suggested we migrate sensors to snort, and having to replace four NRS boxes is not going to help counter the argument.