Showing results for 
Search instead for 
Did you mean: 


In order to upgrade the Cisco Security Monitoring Analysis and Response System (CS-MARS) with CD or DVD ROM, complete these steps. In this example, the upgrade is from version 4.2.2 to 4.2.3. The pkg file used for the upgrade exists on the root directory of the disc.

Note: Enable archiving on the MARS Appliance for two to three days before you perform the attempt to upgrade from the 4.2.2 to the 4.2.3 release. This precaution is strongly recommended in case reinstallation is required due to any encountered errors.

  1. Use the reboot command in order to restart your MARS and wait 15 minutes before you continue.

  2. The only special consideration here is that the 4.2.3 update is a very large update that includes a patch to the database system. Because of this, run through these extra items before you perform the 4.2.3 update.

  3. Complete these steps in order to verify that your MARS Appliance does not have hard drives that are degraded or rebuilding:
    1. At the CLI, enter the raidstatus command.

    2. Verify that the hard drives are neither in rebuilding nor degraded status. If they are, wait until all hard drives are finished rebuilding before you attempt an upgrade.
  4. Complete these steps in order to verify that the MARS Appliance has at least 3 GB of space available on the partition /u01:
    1. At the CLI, enter the diskusage command.

      One of the lines should describe the /u01 partition:

      Filesystem Size Used Avail Use% Mounted on
      /dev/md3 16G 4.6G 10G 31% /u01

    2. Verify at least 3 GB available is available. The example has 10 GB available. A nightly process runs to clean up any files that accumulate on this partition. If you have less than 3 GB, there is an issue with your appliance that you must resolve before you upgrade.
  5. Insert the disc that contains the software upgrade package and issue the pnupgrade cdrom://         command, where             is the name of the file you downloaded and burned to the disc.

  6. After the upgrade completes and the MARS auto restarts, wait another 15 minutes and then issue the pnupgrade log command. Make sure the last line says:

    Upgrade from 4.2.2 2303 to 4.2.3 2403 finished.

  7. When the upgrade is complete, log into the MARS GUI. Browse to Help > About section and verify your version.

In order to download the latest upgrade packages for CS-MARS, refer to Cisco Downloads.

Refer to the Important Upgrade Notes section of Administering the MARS Appliance for more information.

Refer to the Recovery Management section of Administering the MARS Appliance in order to recover CS-MARS.

Note: In order to succesfully recover CS-MARS, it is mandatory to have a monitor, mouse and keyboard hooked up.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers
Quick Links