09-04-2011 06:10 PM - edited 03-10-2019 05:28 AM
MY client claimed that the IPS modular can't upgrade the signature in the ASA5510, He has already buy the license.
Do I need to upgrade the ASA IOS or do something else ?
What is the formal process to fix this problem?
the error is as below:
Cannot upgrade software on sensor.
-This upgrade may only be installed on a sensor with the engine version of 4
The currently installed engine version is 1.
SLPG-BOH-AIP# show version
Application Partition:
Cisco Intrusion Prevention System, Version 5.1(7)E1
Host:
Realm Keys key1.0
Signature Definition:
Signature Update S302.0 2007-09-17
Virus Update V1.2 2005-11-24
OS Version: 2.4.26-IDS-smp-bigphys
Platform: ASA-SSM-10
Serial Number: JAB09410434
Licensed, expires: 26-Sep-2011 UTC
Sensor up-time is 192 days.
Using 609878016 out of 1054670848 bytes of available memory (57% usage)
system is using 17.4M out of 29.0M bytes of available disk space (60% usage)
application-data is using 45.0M out of 166.8M bytes of available disk space (28%
usage)
boot is using 35.2M out of 68.6M bytes of available disk space (54% usage)
MainApp Z-2007_SEP_26_11_54 (Release) 2007-09-26T12:09:32-0500 Ru
nning
AnalysisEngine Z-2007_SEP_26_11_54 (Release) 2007-09-26T12:09:32-0500 Ru
nning
CLI Z-2007_SEP_26_11_54 (Release) 2007-09-26T12:09:32-0500
Upgrade History:
IPS-K9-5.1-7-E1 10:24:03 UTC Fri Aug 05 2011
Recovery Partition Version 1.1 - 5.1(7)E1
SLPG-BOH-AIP#
Solved! Go to Solution.
09-04-2011 07:00 PM
You would need to upgrade the IPS module to the latest version first before you can update the signature. The current version of software 5.1(7)E1 is very old, and the latest version available is now 7.0.5a(E4). E1 engine is very old and is not compatible with the signature that runs on E4 engine.
Here is the release notes for 7.0.5a(E4):
http://www.cisco.com/web/software/282549758/50172/IPS-7_0-5a-E4_readme.txt
You would need to upgrade the current module to at least version 5.1(6)E3 before you can upgrade to 7.0.5a(E4).
Once the IPS module has been upgraded to version 7.0.5a(E4), you can update to the latest signature.
Hope this helps.
09-04-2011 07:00 PM
You would need to upgrade the IPS module to the latest version first before you can update the signature. The current version of software 5.1(7)E1 is very old, and the latest version available is now 7.0.5a(E4). E1 engine is very old and is not compatible with the signature that runs on E4 engine.
Here is the release notes for 7.0.5a(E4):
http://www.cisco.com/web/software/282549758/50172/IPS-7_0-5a-E4_readme.txt
You would need to upgrade the current module to at least version 5.1(6)E3 before you can upgrade to 7.0.5a(E4).
Once the IPS module has been upgraded to version 7.0.5a(E4), you can update to the latest signature.
Hope this helps.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide