Re: Need help with a couple of issues concerning an AIP-SSM - Page 3

cdetirado · ‎06-28-2010

1. How can I see what software versoin the sensor is running.

2. How can I manually update the sensors image.

3. How can I see through the cli when the signatures were last updated.

4. How can I unblock traffic that is being blocked by the Sensor.

Scott Fringer · ‎07-12-2010

Carlos;

You will want to upgrade to 7.0(3)E4 using the file I mentioned

previously.

Scott

cdetirado · ‎07-12-2010

This is what is currently in the IPS sensors, will that file that you recommended upgraded both to the same level for the system image.

Host Certificate Valid from: 23-Jan-2010 to 24-Jan-2012

PRIMARY

fpk-asa-ss5520# sh ver

Application Partition:

Cisco Intrusion Prevention System, Version 6.2(2)E4

Host:

Realm Keys key1.0

Signature Definition:

Signature Update S480.0 2010-03-24

OS Version: 2.4.30-IDS-smp-bigphys

Platform: ASA-SSM-20

Serial Number: JAF1310APGT

Licensed, expires: 28-May-2012 UTC

Sensor up-time is 20:55.

Using 1030475776 out of 2093604864 bytes of available memory (49% usage)

application-data is using 43.0M out of 166.8M bytes of available disk space (27% usage)

boot is using 40.2M out of 68.6M bytes of available disk space (62% usage)

MainApp E-ECLIPSE_2009_SEP_14_13_21_6_2_1_119 (Ipsbuild) 2009-09-14T13:22:32-0500 Running

AnalysisEngine EE-ECLIPSE_E4_2010_MAR_25_00_44_6_2_2 (Ipsbuild) 2010-03-25T00:46:02-0500 Running

CLI E-ECLIPSE_2009_SEP_14_13_21_6_2_1_119 (Ipsbuild) 2009-09-14T13:22:32-0500

Upgrade History:

IPS-K9-6.2-2-E4 03:18:06 UTC Thu Mar 25 2010

Recovery Partition Version 1.1 - 6.2(2)E4

Host Certificate Valid from: 23-Jan-2010 to 24-Jan-2012

SECONDARY

fpk-asa-ss5520-s# sh ver

Application Partition:

Cisco Intrusion Prevention System, Version 7.0(2)E3

Host:

Realm Keys key1.0

Signature Definition:

Signature Update S478.0 2010-03-15

Virus Update V1.4 2007-03-02

OS Version: 2.4.30-IDS-smp-bigphys

Platform: ASA-SSM-20

Serial Number: JAF1350BAGJ

Licensed, expires: 19-Apr-2013 UTC

Sensor up-time is 33 days.

Using 1044209664 out of 2093600768 bytes of available memory (49% usage)

system is using 17.4M out of 38.5M bytes of available disk space (45% usage)

application-data is using 45.3M out of 166.8M bytes of available disk space (29% usage)

boot is using 41.5M out of 68.6M bytes of available disk space (64% usage)

application-log is using 123.5M out of 513.0M bytes of available disk space (24% usage)

MainApp B-BEAU_2009_OCT_15_08_07_7_0_1_111 (Ipsbuild) 2009-10-15T08:09:06-0500 Running

AnalysisEngine B-BEAU_2009_OCT_15_08_07_7_0_1_111 (Ipsbuild) 2009-10-15T08:09:06-0500 Running

CollaborationApp B-BEAU_2009_OCT_15_08_07_7_0_1_111 (Ipsbuild) 2009-10-15T08:09:06-0500 Running

CLI B-BEAU_2009_OCT_15_08_07_7_0_1_111 (Ipsbuild) 2009-10-15T08:09:06-0500

Upgrade History:

* IPS-K9-7.0-2-E3 19:43:07 UTC Thu Oct 15 2009

IPS-sig-S478-req-E3.pkg 17:50:18 UTC Mon Mar 22 2010

Recovery Partition Version 1.1 - 7.0(2)E3

Host Certificate Valid from: 20-Mar-2010 to 20-Mar-2012

fpk-asa-ss5520-s#

Scott Fringer · ‎07-12-2010

Yes, that file should successfully upgrade both AIP-SSMs to release

7.0(3)E4.

Scott

cdetirado · ‎07-12-2010

When I try to download file 7.0(3)E4 it says that

IPS-K9-7.0-3-E4.pkg
Release Date: 07/Jun/2010
IPS 7.0 Major Upgrade File (All Supported Platforms Except AIM-IPS and NME-IPS)
Size: 29869.43 KB (30586294 bytes)

And I am upgrading an AIP-SSM-20 what is the file that I can use to

Scott Fringer · ‎07-12-2010

That is the correct file - you are upgrading an AIP-SSM not an AIM-IPS

(this module is for Cisco Integrated Services Routers).

Scott