Upgradation from IPS 6.2(1)e3 to 7.0(2)E3.

Hi All.
   Any separate license is required to upgrading os from 6.2(1)e3 to 7.0(2)E3 .
Pls find the show version of IPS.
sh version
Application Partition:
Cisco Intrusion Prevention System, Version 6.2(1)E3
Host:
    Realm Keys            key1.0
Signature Definition:
    Signature Update      S407.0                   2009-06-08
    Virus Update          V1.4                     2007-03-02
OS Version:               2.4.30-IDS-smp-bigphys
Platform:                 WS-SVC-IDSM-2
Serial Number:
Trial license, expires:   02-Mar-2011 UTC
Sensor up-time is 10 days.
Using 1408135168 out of 1983508480 bytes of available memory (70% usage)
application-data is using 36.7M out of 166.8M bytes of available disk space (23%
usage)
boot is using 39.7M out of 68.6M bytes of available disk space (61% usage)
application-log is using 533.0M out of 2.8G bytes of available disk space (20% u
sage)
MainApp          E-2008_OCT_16_16_24   (Release)   2008-10-16T16:40:57-0500   Ru
nning
AnalysisEngine   E-2008_OCT_16_16_24   (Release)   2008-10-16T16:40:57-0500   No
tRunning
CLI              E-2008_OCT_16_16_24   (Release)   2008-10-16T16:40:57-0500
Upgrade History:
* IPS-sig-S386-req-E3       15:15:25 UTC Sat Mar 14 2009
IPS-sig-S407-req-E3.pkg   16:02:01 UTC Sat Jul 11 2009
Maintenance Partition Version 2.1(3)
Recovery Partition Version 1.1 - 6.2(1)E3
Host Certificate Valid from: 25-Feb-2008 to 25-Feb-2010
Appreciating your earlier reply.
Regards,
AVS

There is no license required to do software upgrades.However a valid License is required to install signature updates.
Regards
Farrukh

Similar Messages

Idsm-2 problem: sensor upgrade from 4.1 to 5 or higher

Hi all,
I have a problem with my IDSM-2 module. I'm trying to sensor upgrade from IDS to IPS software (from 4.1 version to 5.x or higher).
If I do this from sensor under "admin user" and use major patch - IPS-K9-maj-5.0-1e-S149.rpm.pkg then I receive error:
"Error: idsPackageMgr: digital signature of the update file was not valid, use CCO to replace corrupted file ".
But file "IPS-K9-maj-5.0-1e-S149.rpm.pkg" is NOT corrupted. I cheked it under "service user" with md5sum utility - checksum is correct.
If I try to upgrade from maintance mode (ie re-image with wipe all information in application partition) then I receive:
"Application image upgrade complete. You can boot the image now.
Partition upgraded successfully"
Next, I'm reboot IDSM-2 module and receive:
"000133: Sep 7 15:10:18.622 MSK/MDD: %HA_EM-6-LOG: Mandatory.go_bootup.tcl: GOLD EEM TCL policy for boot up diagnostic
000134: Sep 7 15:10:18.290 MSK/MDD: %DIAG-SP-3-MAJOR: Module 4: Online Diagnostics detected a Major Error. Please use 'show diagnostic result <target>' to see test results.
000135: Sep 7 15:10:18.294 MSK/MDD: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 4: TestPCLoopback failed on port(s) 3-4
000136: Sep 7 15:10:19.170 MSK/MDD: %OIR-SP-3-LC_FAILURE: Module 4 has Major online diagnostic failure, Card will be reset to re-run diagnostic. Please check sup-bootflash diaginfo file for previous detailed diagnostic result.
000137: Sep 7 15:10:19.170 MSK/MDD: %OIR-SP-3-PWRCYCLE: Card in module 4, is being power-cycled 'off (Diagnostic Failure)'
000138: Sep 7 15:10:19.170 MSK/MDD: %C6KPWR-SP-4-DISABLED: power to module in slot 4 set off (Diagnostic Failure)"
ie module go to the "PwrDown" state.
I try to upgrade for next firmware:
IPS-K9-maj-5.0-1e-S149.rpm.pkg
IPS-IDSM2-K9-sys-1.1-a-7.0-5a-E4.bin.gz
IPS-K9-7.0-5a-E4.pkg
IPS-K9-maj-5.0-1e-S149.rpm.pkg
WS-SVC-IDSM2-K9-sys-1.1-a-5.0-1.bin.gz
and did not get success
chassis - 6509-e, sup - VS-S720-10G + VS-F6K-PFC3C, ios - s72033-adventerprisek9_wan-mz.122-33.SXI6.bin
maintance software for IDSM-2 module - 3.4(2)m
Could you please help me? Thanks in advance!

I have a problem with my IDSM-2 module. I'm trying to sensor upgrade from IDS to IPS software (from 4.1 version to 5.x or higher). If I do this from sensor under "admin user" and use major patch - IPS-K9-maj-5.0-1e-S149.rpm.pkg then I receive error: "Error: idsPackageMgr: digital signature of the update file was not valid, use CCO to replace corrupted file ". But file "IPS-K9-maj-5.0-1e-S149.rpm.pkg" is NOT corrupted. I cheked it under "service user" with md5sum utility - checksum is correct.
It has been a long time since I've seen a sensor running 4.1 or an upgrade to 5.0(1e) . If I recall correctly, there were some issues with upgrading if you were running a release from the 4.1 train earlier than 4.1(4). Additionally, the upgrade from 4.1 -> 5.0 includes a configuration conversion (due to differences between the software trains), which was prone to failure depending on the presence of certain configuration options.
Unless you absolutely need to keep the existing configuration, you would save yourself time and effort by simply re-imaging the sensor directly to the desired release. Modern (supported) releases would be either 7.0(5a)E4 or 6.2(3)E4.
Next, I'm reboot IDSM-2 module and receive:"000133: Sep 7 15:10:18.622 MSK/MDD: %HA_EM-6-LOG: Mandatory.go_bootup.tcl: GOLD EEM TCL policy for boot up diagnostic000134: Sep 7 15:10:18.290 MSK/MDD: %DIAG-SP-3-MAJOR: Module 4: Online Diagnostics detected a Major Error. Please use 'show diagnostic result ' to see test results.000135: Sep 7 15:10:18.294 MSK/MDD: %CONST_DIAG-SP-3-BOOTUP_TEST_FAIL: Module 4: TestPCLoopback failed on port(s) 3-4000136: Sep 7 15:10:19.170 MSK/MDD: %OIR-SP-3-LC_FAILURE: Module 4 has Major online diagnostic failure, Card will be reset to re-run diagnostic. Please check sup-bootflash diaginfo file for previous detailed diagnostic result.000137: Sep 7 15:10:19.170 MSK/MDD: %OIR-SP-3-PWRCYCLE: Card in module 4, is being power-cycled 'off (Diagnostic Failure)'000138: Sep 7 15:10:19.170 MSK/MDD: %C6KPWR-SP-4-DISABLED: power to module in slot 4 set off (Diagnostic Failure)"
I would try re-imaging the sensor once more using the IPS-IDSM2-K9-sys-1.1-a-7.0-5a-E4.bin.gz System Recovery Image file found here, following the procedure described here. If the module still fails to boot after that (still citing a Diagnostic Failure), try moving it to another slot in the chassis (if possible).
What color is the IDSM-2 Status LED (on front of module) when it is in this state? An RMA may be necessary to resolve this.

Post Upgrade from 4.x to 5.0 to 5.1 questions

All, I have upgraded my first sensor 4.x to 5.0 to 5.1. Here is my process
1) Upgraded from 4.x to 5.0 using FTP with this file IPS-K9-maj-5.0-1c-S149.rpm.pkg
2) Installed License Key
3) Using VMS, I went from 5.0 to 5.1 using file IPS-K9-min-5.1-1.zip
4) Now, my switchport is down, down monitoring.
Am I missing a patch?
Did I upgrade properly?
Why is it down down monitoring and not up down monitoring on the switchport that my sensing port connects to in the switch.

You may be hitting a common issue with 5.1.1 where the senorApp process becomes unresponsive. You should not stay at 5.1.1 - you need to upgrade to 5.1.3. If you are seeing this issue then:
1) disable the sniffing interfaces
2) reboot the sensor
3) upgrade to 5.1.3
4) enable the sniffing interfaces

Upgrading from SSM-10 to ASA 5525x

We are upgrading from an ASA 5510 with a SSM-10 module to the 5525x ips. Can we simply copy the config from the SSM-10 to the 5525x?

Please refer the below document for the details regarding the catalog conversions.
http://helpx.adobe.com/photoshop-elements/kb/common-catalog-issues-upgrade-elements.html

Upgrading from v4.1 to v6.0

I have an IDSM-2 that I want to upgrade. Would there be a problem if I upgraded my IPS from 4.1 to 6.0, CONSIDERING that i'm willing to blow away any old configurations. Basically, I want to start from scratch on the IDSM with the 6.0. If that's the case, i'm assuming I can just go ahead and jump to install 6.0?
Jason

Your question comes down to terminology.
An "upgrade" in IPS terminology involves the conversion of configuration from the lower version to the higher version.
The IPS 6.0(2)E1 upgrade file (the latest 6.0 version you should use) is: IPS-K9-6.0-2-E1.pkg available from this link:
http://www.cisco.com/cgi-bin/tablebuild.pl/ips6
BUT the IPS 6.0(2)E1 upgrade file can NOT upgrade a sensor from 4.1 to 6.0(2)E1.
Instead if you were worried about conversion of your configuration you would have to first upgrade to 5.0(1e). And then from 5.0(1e) you CAN upgrade directly to 6.0(2)E1 using the file I mentioned above.
But by saying that you are not concerned with conversion of your 4.1 configuration, then you open yourself to another alternative that we refer to as "System Re-imaging".
With System Re-imaging everything on the sensor will be wiped out (including configuration) and a fresh manufacturing image will be installed on the sensor.
System Re-imaging can be done to Any version (any version that has a System Image) from Any version.
There are no version requirements because it first erases everything on the sensor.
To do a System Re-image to 6.0(2)E1 you will need to download the 6.0(2)E1 System Image file specifically for the IDSM-2:
WS-SVC-IDSM2-K9-sys-1.1-a-6.0-2-E1.bin.gz
from this link:
http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-cat6500-idsm2-sys
Follow these steps:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids13/cliguide/cliimage.htm#wp1031426

Upgrading from v1.1 to v2.0

We recently purchased the upgrade to CW v2.0. I tried to load a Visual
Basic 6 project that was done with CW v1.1 and ran into errors during
loading. It complained that all of the controls were not a loaded
class. Worse yet, is that VB replaced all fo the CW controls on the
form with a picturebox control of the same name.
Has anyone else had problems upgrading from v1.1 to v2.0 ?

Your question comes down to terminology.
An "upgrade" in IPS terminology involves the conversion of configuration from the lower version to the higher version.
The IPS 6.0(2)E1 upgrade file (the latest 6.0 version you should use) is: IPS-K9-6.0-2-E1.pkg available from this link:
http://www.cisco.com/cgi-bin/tablebuild.pl/ips6
BUT the IPS 6.0(2)E1 upgrade file can NOT upgrade a sensor from 4.1 to 6.0(2)E1.
Instead if you were worried about conversion of your configuration you would have to first upgrade to 5.0(1e). And then from 5.0(1e) you CAN upgrade directly to 6.0(2)E1 using the file I mentioned above.
But by saying that you are not concerned with conversion of your 4.1 configuration, then you open yourself to another alternative that we refer to as "System Re-imaging".
With System Re-imaging everything on the sensor will be wiped out (including configuration) and a fresh manufacturing image will be installed on the sensor.
System Re-imaging can be done to Any version (any version that has a System Image) from Any version.
There are no version requirements because it first erases everything on the sensor.
To do a System Re-image to 6.0(2)E1 you will need to download the 6.0(2)E1 System Image file specifically for the IDSM-2:
WS-SVC-IDSM2-K9-sys-1.1-a-6.0-2-E1.bin.gz
from this link:
http://www.cisco.com/cgi-bin/tablebuild.pl/ips6-cat6500-idsm2-sys
Follow these steps:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids13/cliguide/cliimage.htm#wp1031426

DNS Upgrade from 10.6.8 to 10.7.3

Hello,
I just upgraded from Snow Leopard Server 10.6.8 up to Lion Server 10.7.3. All services seemed to come through ok except DNS. None of the records on the server resolve anymore. I have setup forwarding IPs when the requested domain isn't in the local database, and those still seem to work becuase clients can still resolve external websites just fine, however no internal services resolve. I can't even get the server itself to resolve DNS entries even though its DNS server is set as 127.0.0.1.
Any ideas on how to get this working? I have started and stopped the DNS service, restarted the server and even removed the DNS service and re-added.
Help is much appreciated.
Just wanted to add this is what clients get if they try to resolve an internal site (from network utility). (192.168.2.10 is the IP of the server).
Lookup has started…
Trying "plex2.cinemiketheatres.com"
Received 44 bytes from 192.168.2.10#53 in 0 ms
Trying "plex2.cinemiketheatres.com.cinemiketheatres.com"
Host plex2.cinemiketheatres.com.cinemiketheatres.com not found: 2(SERVFAIL)
Received 65 bytes from 192.168.2.10#53 in 0 ms

Your records do not have a . at the end of the fully qualified host name so the request is reappending the search domain. Go back into Server Admin and review your A records. Make sure each one ends with a . as shown below.

Upgrade asa5585x ips

I upgraded our IPS from 7.1(3)E4 to 7.1(4)E4. My question is how long does it normally take to reboot?

- performed the upgrade using the CLI with no errors
- The upgrade process appeared to complete and reboot, however, the module never came back
to an up state
- sh module 1 detail showed the SSP in an unresponsive state
- sh tech does not show much of anything in the main.log
only message observed during the post is
Cid/E errSystemError - collectStatistics
failed: System error: Could not get user mode interface statistics
[IntfcManager::IntfcManager]
- Most likely related to CSCtw62226

Upgrade from Solaris 11 Express to Solaris 11 Release (11/11); Guide MIA?

Would there be an easy way to upgrade from Solaris 11 Express to Solaris 11 Release (11/11)? The FAQ for Solaris 11 Release has the following hopeful text:
Can I upgrade to Oracle Solaris 11 from Oracle Solaris 11 Express or Oracle Solaris 11 Early Adopter?
Yes. Customers can upgrade to Oracle Solaris 11 by using the package management tools. Refer to the Oracle Solaris 11
Transition Guide (http://www.oracle.com/pls/topic/lookup?ctx=E23824&id=MF JAI) for more information
But that link comes up with an error page 404, "topic not found".
The one transition guide I can find is:
http://download.oracle.com/docs/cd/E23824_01/html/E21799/index.html
But that covers Solaris 10 jumpstart, not Solaris 11 Express or Early Adopter.
The Solaris 11 documentation at:
http://www.oracle.com/technetwork/server-storage/solaris11/documentation/index.html
Also seems to mention only Solaris 10, not 11 Express or Early Adopter.
I have already downloaded the full repo for Solaris 11 Release, and the live installer, but I'm hoping it's something as simple as pointing the ips manager to a new repository, or just loading the full repo I already have as a local source. I would also like to keep the dtrace and sun studio set up I have now in the Express version, without reinstalling them on a new release version on bare metal.
If it keeps the features of the express version while ironing out a few kinks (gdm authentication bug, etc.), that would rock.
Many Thanks,
Gordon

Alan, Thank You, that worked with no problem at all. 11 Express was already using the correct repository, and only required a pkg command update, then other updates.
So here's what I'm guessing:
1. The Oracle Solaris maintained repository for Express and Early Adopter are now the same as Release, but they do require an updated pkg executable and pkg update command.
2. The second form of the command mentioned in the update guide:
# pkg set-publisher -g http://pkg.oracle.com/solaris/release
-G http://internal.co.com/solaris solaris
is for using a local copy of the repository within our lan or vpn wan.
3. Updates should be fairly regular now that Solaris 11 is in release version.
I think the new hash (SHA 256) fried some of our old gdm settings for our users, so we're creating new user accounts, and migrating the older accounts. We don't have too many, so it's not a problem for us. But that brings up another point:
4. The graphical user manager in Express is now gone, and user and group management are now done with command line interface.
That's fine with me as well. I always use ssh to connect to the machine and then run the screen command for administration. The graphical user manager was always kludgy in Express, and I couldn't get it to work correctly anyway.
This is great stuff so far. Well done.
Gordon

I upgraded from 3gs and want to use my old 3gs as an ipod. how can i update my new apple ID on the 3gs as it still shows a previous one that I had?

I recently upgraded from 3Gs to Iphone4 and want to use my old 3Gs as an ipod. how can i update
the user ID on the 3gs to a new one that I have as it is still showing a previous user ID?

Settings>Store...tap the ID shown...sign out...sign back in with the ID you want to use.

Is it really possible to upgrade from a Treo 650 to a Treo 750?

I am not a very happy customer at the moment, but any help would be greatly appreciated. I upgraded from my old Palm Tungsten to a Zire, then to a Cingular Treo 650, combining three devices into one. I have since discovered that the Treo 650 seems to have a faulty transmission mode, as I can rarely be clearly understood by whomever I call. Am on the second (or third, I have lost track) and continue to have the same problem. I get five bars of reception but can't be understood on the other end. A bit of a problem when one is trying to call 911. Am constantly told I am "breaking up". The repair shop says it "Can't duplicate the problem". OK, then I do not want to give up all the info I have stored in the fool thing, and the 750 seems to have a different system, so I thought I would try that. All the stuff I could find seemed to indicate it wouldn't be a problem to upgrade. When the 750 arrived, I tried to install the software from the CD on my Windows XP computer. No dice. Setup encounters an error and closes. Can't even look at the files, because setup tries to run any time I access the CD. From any drive. Gave it to my girlfiend to check on her computer, and the CD seemed to run fine. Other CDs work just fine on my computer. Must be some kind of conflict, but what? Tried calling the AT&T number that suggested they could help with setup, and was first connected to the business center, they routed me to the laptop center, who routed me to the network center, who said they would have to bring in the Palm customer service and connected me to a Mac guy that dumped me back to a menu that took me to someone for whom English is a second language with whom I was trying to communicate over a very poor satellite connection. They made no sense anyway. telling me first that I couldn't have two desktops running (wrong, my girlfriend has my old Zire and the CD worked fine) and then insisting that the serial number on my device had to start with a P, when it clearly does not have any alpha characters in it. Gave up on that route of assistance. Managed to get the new ActiveSync installed from my girlfriends computer over the network. Great. Now let's get my 650 synced with Outlook (which I have not used at home) and see if we can move on. Nope. First I have to update Outlook 2000 from the old Win98 to my current XP. Find the old CD, and square that away. OK, now sync to Outlook. Nope. The sync program gives an error, saying it will only sync with Outlook 98, 2000, and XP(2002). Good grief. I have Outlook 2000, and the software apparently does not recognize it. If the Palm doesn't work, there is no reason for me to keep this phone, and I am very close to returning it and abandoning the Palm entirely when I upgrade to something that works, although I dread re-entering all that information.
Post relates to: Treo 750 (AT&T)
This question was solved.
View Solution.

Thanks for the feedback. Today I installed an Enterprise version of Office 2007 I purchased a while back, but had not yet installed. Microsoft presented a few challenges, but they were quickly resolved. I then downloaded the appropriate conduit from Palm, and synced the 650 with the handheld overwriting the computer. Then used Active Destop to sync the 750. Satisfied I had moved as much info as possible, I called AT&T and had them move the phone number to the new Treo.
Bonus! When the guy at AT&T called me on the new phone to verify it, he said it sounded better than my landline.
Sorry for the streaming paragraph. When it is late I tend to write like I think.
Dave
Post relates to: Treo 750 (AT&T)

I upgraded from iPhone 3GS to iPhone 6. Everything converted fine until I deleted an app in error. When I downloaded it from iTunes, my account is no longer recognized by the app's host servers. Can I go back and re-sync one app from my old phone?

I upgraded from iPhone 3GS to iPhone 6. Everything converted fine. Yesterday I deleted an app in error. When I downloaded the software it from iTunes ( did this many times on the old 3GS), my account is no longer recognized by the app's host servers (Playtika), even though it did after the initial conversion. Can I go back and re-sync just one app from my old phone?

Try deleting what is called the iPod Photo Cache.
http://support.apple.com/kb/TS1314

I have just downloaded the upgrade from Mountain Lion to Yosemite. In the process i am now unable to gain access to iTunes. The app on desktop no longer works and the install is not able to be opened.

I Have downloaded the upgrade from Mountain Lion to Yosemite. In thee process of so doing I have lost access to iTunes.
The app on desktop no longer opens the program and having downloaded and installed as per Apple instructions, can not make a connection.

Hi, drjbuchanan.
Thank you for visiting Apple Support Communities.
Here are some troubleshooting steps that I would recommend going through when experiencing this issue.
iTunes: Troubleshooting issues with third-party iTunes plug-ins
http://support.apple.com/en-us/ts3430
Troubleshooting iTunes installation on Mac OS X
http://support.apple.com/en-us/ht2311
Cheers,
Jason H.

Can't print from IE 8 after upgrading from Vista to Windows 7

My laptop (HP Elitebook 8530w) uses two HP printers: Color LaserJet CP3525x (at work) and Deskjet 6940 (at home). Both printers are accessed across a local network.
I recently upgraded from Vista Enterprise to Windows 7 Enterprise.
Everything still prints fine (from Word, Adobe Reader, Windows Photo Viewer, etc.), except for IE 8! When I try to print a web page from IE, it prints only the page header, and otherwise the sheet is empty. This symptom occurs on both printers. (And of course this worked fine before the upgrade.)
Any ideas? Thanks for any help.
Jeff
This question was solved.
View Solution.

(same poster)
If anyone else is having this problem, I found the solution on another forum (http://social.answers.microsoft.com/Forums/en-US/InternetExplorer/thread/920588e5-ccc4-4e24-83d6-606...).
Specifically, the following steps solved the problem:
1. If it doesn't already exist, create a directory named "Low" in your directory "C:\Users\<your_user_name>\AppData\Local\Temp\".
2. From a command prompt, issue this command: ICACLS C:\Users\<your_user_name>\AppData\Local\Temp\Low /setintegritylevel (OI)(CI)low
Jeff

Fields in read-only mode for BP transaction in upgrade from 4.72 to ECC6.0

Hello,
This is regarding the query for BP transaction in upgrade from 4.72 to ECC 6.0.
While creating BP / Changing BP system is disabling the fields in compnay code & sales area option. There is a SAP not provided 907860; and specified that the proplem is because of the delta customizing.
All the customization settings are as per the note. And the Synchronization Control is also activated. But still the fields are disabled only.
I have checked the field settings also in Cross-Application-Components & Logistic-Genral.
But these are not working for compnay code & sales area data.
please let me know if anyone has faced this type of problem / found any solution on this.
Best Regards,
Shubhada

SAP IMG -> Cross Application Components -> Master Data Synchronization  Synchronization Control -> Synchronization Control -> Activate Synchronization options
This setting allows you to activate synchronization of BP with R/3. Not maintaining the values may result in certain fields being read-only in BP.
Suggested Values:
Source Object: BP | Target Object: CUSTOMER | Active Indicator : X
Source Object: BP | Target Object: VENDOR | Active Indicator : X
Source Object: CUSTOMER | Target Object: BP | Active Indicator : X
Source Object: VENDOR | Target Object: BP | Active Indicator : X
Have you set all of the above settings??
BHARATH

Upgradation from IPS 6.2(1)e3 to 7.0(2)E3.

Similar Messages

Maybe you are looking for