topic Re: Upgrade AIP-SSM-10 on ASA 5510 in Network Security

Upgrade AIP-SSM-10 on ASA 5510

kinskins01 — Sun, 10 Mar 2019 12:10:58 GMT

Hi,

I want to upgrade the IPS module in an ASA 5510 and have a few questions. The AIP-SSM is running 6.2(1)E3 479.0 and I have a valid CCO account etc for this.

Does the Software version on the ASA matter?
When I look in software downloads < IPS there are .pkg and .img files. I want to upgrade to 6.3(3)E4. Do I have to re-image the IPS module?
As far as I know re-imaging will wipe teh device so I just reload the config after, right?
I presume I can apply any upgrades after going to E4?
Can you give me any links for this upgrade?

cheers

Re: Upgrade AIP-SSM-10 on ASA 5510

Panos Kampanakis — Thu, 18 Nov 2010 19:38:50 GMT

To answer your questions

1. Does the Software version on the ASA matter?

As long as the ASA is in 7.2.x or higher it does not.

2. When I look in software downloads < IPS there are .pkg and .img files. I want to upgrade to 6.3(3)E4. Do I have to re-image the IPS module?

You would need a bin file to get to 6.3.3

3. As far as I know re-imaging will wipe teh device so I just reload the config after, right?

Correct

4. I presume I can apply any upgrades after going to E4?

Correct

5. Can you give me any links for this upgrade?

https://supportforums.cisco.com/docs/DOC-5668 shows how to do it with an CSC module. You will do the same thing but you will use the AIP image.

I hope it helps.

Re: Upgrade AIP-SSM-10 on ASA 5510

Scott Fringer — Fri, 19 Nov 2010 11:53:26 GMT

Let me provide some clarification on a few points:

2. You do not need to re-image the device using the .img file. You can upgrade the device, maintaining your existing configuration using the .pkg file. This is the recommended method for upgrading all of Cisco's IPS appliances/modules. The .img re-image file should only be used to restore the device to factory defaults.

5. Here are links for upgrading the sensor using a .pkg file. For upgrades via the IDM GUI:

http://www.cisco.com/en/US/docs/security/ips/6.2/configuration/guide/idm/idm_sensor_management.html#wp2126670

For upgrades via the CLI:

http://www.cisco.com/en/US/docs/security/ips/6.2/configuration/guide/cli/cli_system_images.html#wp1142504

Another point of clarification; the current releases of IPS software supported on the AIP-SSM-10 are (taking into account you are currently running 6.2(1)E3):

6.2(3)E4

7.0(4)E4

You can upgrade directly to either release.

Scott

Re: Upgrade AIP-SSM-10 on ASA 5510

kinskins01 — Fri, 19 Nov 2010 16:42:49 GMT

ThanksGuys,

When I try to upgrade to IPS-SSC_5-K9-6.2-3-E4.pkg from the GUI and CLI I get "cannot upgrade the software on the sensor. This package cannot be installed on the SSM-IPS10 platform" I am downloading it from under the ASA modules section

This is the latest .pkg file available to me. Any ideas ?

Re: Upgrade AIP-SSM-10 on ASA 5510

marcabal — Fri, 19 Nov 2010 16:50:20 GMT

You selected the file for the SSC-5 platform. It will not work on the SSM-10 platform.

In the download site you needed to have selected the "Cisco ASA Advanced Inspection and Prevention (AIP) Security Services Module " instead of "Cisco ASA Advanced Inspection and Prevention Security Services Card".

Then selecting the Upgrades link and 6.2(3)E4 you would have come to this file which can be used on the SSM-10: IPS-K9-6.2-3-E4.pkg

Re: Upgrade AIP-SSM-10 on ASA 5510

kinskins01 — Fri, 19 Nov 2010 17:05:32 GMT

Hi,

I go to Products < Security < IPS < IPS Modules for ASA < and the only option is Cisco ASA Advanced Inspection and Prevention Security Services Card

Must be a link missing using the software download tool on the site. I followed your link and can see what I want

thank you