cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
856
Views
0
Helpful
1
Replies

IPS can't upgrade the signature

Totti
Level 1
Level 1

MY client claimed that the IPS modular can't upgrade the signature in the ASA5510, He has already buy the license.

Do I need to upgrade the ASA IOS or  do something else ?

What is the formal process to fix this problem? 

the error is as below:

Cannot upgrade software on sensor.

-This upgrade may only be installed on a sensor with the engine version of 4

The currently installed engine version is 1.

SLPG-BOH-AIP# show version

Application Partition:

Cisco Intrusion Prevention System, Version 5.1(7)E1

Host:

    Realm Keys          key1.0

Signature Definition:

    Signature Update    S302.0                   2007-09-17

    Virus Update        V1.2                     2005-11-24

OS Version:             2.4.26-IDS-smp-bigphys

Platform:               ASA-SSM-10

Serial Number:          JAB09410434

Licensed, expires:      26-Sep-2011 UTC

Sensor up-time is 192 days.

Using 609878016 out of 1054670848 bytes of available memory (57% usage)

system is using 17.4M out of 29.0M bytes of available disk space (60% usage)

application-data is using 45.0M out of 166.8M bytes of available disk space (28%

usage)

boot is using 35.2M out of 68.6M bytes of available disk space (54% usage)

MainApp          Z-2007_SEP_26_11_54   (Release)   2007-09-26T12:09:32-0500   Ru

nning

AnalysisEngine   Z-2007_SEP_26_11_54   (Release)   2007-09-26T12:09:32-0500   Ru

nning

CLI              Z-2007_SEP_26_11_54   (Release)   2007-09-26T12:09:32-0500

Upgrade History:

  IPS-K9-5.1-7-E1   10:24:03 UTC Fri Aug 05 2011

Recovery Partition Version 1.1 - 5.1(7)E1

SLPG-BOH-AIP#

1 Accepted Solution

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

You would need to upgrade the IPS module to the latest version first before you can update the signature. The current version of software 5.1(7)E1 is very old, and the latest version available is now 7.0.5a(E4). E1 engine is very old and is not compatible with the signature that runs on E4 engine.

Here is the release notes for 7.0.5a(E4):

http://www.cisco.com/web/software/282549758/50172/IPS-7_0-5a-E4_readme.txt

You would need to upgrade the current module to at least version 5.1(6)E3 before you can upgrade to 7.0.5a(E4).

Once the IPS module has been upgraded to version 7.0.5a(E4), you can update to the latest signature.

Hope this helps.

View solution in original post

1 Reply 1

Jennifer Halim
Cisco Employee
Cisco Employee

You would need to upgrade the IPS module to the latest version first before you can update the signature. The current version of software 5.1(7)E1 is very old, and the latest version available is now 7.0.5a(E4). E1 engine is very old and is not compatible with the signature that runs on E4 engine.

Here is the release notes for 7.0.5a(E4):

http://www.cisco.com/web/software/282549758/50172/IPS-7_0-5a-E4_readme.txt

You would need to upgrade the current module to at least version 5.1(6)E3 before you can upgrade to 7.0.5a(E4).

Once the IPS module has been upgraded to version 7.0.5a(E4), you can update to the latest signature.

Hope this helps.

Review Cisco Networking for a $25 gift card