5.0 Auto-Update configuration

kpruett · ‎03-17-2005

Since I'm without an MC for a few months, I've tried configuring auto-update on the sensors with the new 5.0 code. I've set the correct IP, service type, login, password and directory. I also set it for hourly updates until I'm sure it's working correctly.

It's not getting the latest image file I have there though. Can anyone give help for the following questions:

1) Can I have multiple signature updates in the directory? Will the device load the latest one, or any that it's missing?

2) Monitoring, Events and selecting status events of all types gives me NO details on when it tried to update or any problems in the update itself. Is there any way for me to troubleshoot or see status for why the updates aren't working?

-kpruett

jamesand · ‎03-20-2005

Yes, you can have mutiple sig updates (as well as other maj, min, serv pack, and engineering patch packages). The 5.0 auto updates logic will attempt to apply the latest sig update.

To troubleshoot, there are several new status events generated (show ev status cli cmd). There is also a new section added to the host statistics output (show stat host cli cmd.

If this does not help, post the auto update config details and I can help with the troubleshooting.

kpruett · ‎03-24-2005

Jamesand, thanks for the reply, I didn't know about the cli event and I'll check those. I did find out though that I had no problems with the daily setting, but could not get it to work on an hourly or less than daily setting.

At this point, until I can get more event details I can't tell but at least I have the sensors updating. Nice to see they also have the logic for major updats as well. :)

-kpruett

ajay_dand · ‎03-24-2005

Hi,

If you are downloading the auto-updates from the Internet, could you please share the settings? I tried setting up the Auto-update feature, but somehow unable to do it successfully.

kpruett · ‎03-28-2005

If by internet you mean to download the updates from Cisco directly to the sensors, this isn't possible that I know of. For some reason Cisco has chasen not to allow this to be done directly from their site.

You have to have a location locally that you place the updates on where the sensors can then log in and download updates from.

I have mine on an FTP server set for daily updates and it works fine.

-kpruett

ajay_dand · ‎03-28-2005

But that means, you still have to get the updates from the Cisco site manually?