Cisco ASA IPS module

[mohamedjasren]

dear all,

need your help regarding IPS. what i need to done and how to check license??

[Harish Balakrishnan]

Hello Mohamed,

you can login to the module using ASA CLI,

sesssion slot 1 processor 1 command.. and show version on the module should give you license information

regards

Harish.

[mohamedjasren]

thanks Harish. any step or guide to renew IPS. i dont have any experience... really need help

[Andrew Phirsov]

I think you should look thorough this guide, if you're talking about 5500-x series appliance:

http://www.cisco.com/en/US/docs/security/ips/7.1/configuration/guide/cli/cli_asa_ips.html

[mohamedjasren]

can u guide me update ASA SSM-10 from 6 to latest version

[Andrew Phirsov]

This might be what you're looking for:

http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_system_images.html#wp1142504

There's no real difference if you're upgrading SSM module or the whole, say 4300 appliance.

[mohamedjasren]

actually mine is ver 6.0(6)E4. i want to update to latest version. if i not mistaken now ver 7. need to aware to specific ios. bacause now im running on 8.0

[Andrew Phirsov]

It doesn't matter what your ASA OS is. Sensor on your module runs separate image, independent of the ASA's one. So, you just have to log in to the IPS module with the

sesssion slot 1 processor 1 command and do the things, provided in the link above.

[mohamedjasren]

in that link u give Andrew, Cisco only specific TFTP to transfer new version of IPS OS. can i use different TFTP like TFTPD32? or other? can u help me to find because im lost. im looking an example to make it work and easy to understand.

[Andrew Phirsov]

It seems like upgrade feature doesn't support TFTP, only FTP.

There was discussion on your topic and i think this should be enough for you:

https://supportforums.cisco.com/thread/2053307

[mohamedjasren]

Mr Andrew, it mean i will be easy if i update using IPS Manager Express????