Upgrading IDSM2 and IDS 4235

I have 12 IDSM2 and 4 IDS 4235 managed through VMS, I configured automatic download of signature updates but I notice that S189 was missed.
Is it possible to apply the last Service Pack 4.1.5 from VMS? If yes do I simply have to download the file in the correct directory and apply it as a normal signature update or what method shall I use? I need to manage the update process centrally because my IDS systems are all remote.
Thanks for your help,
Chiara

I tried. There is no way to do it. VMS returns a bad file type and effectively the service pack is .rpm.pkg while files managed during updates by VMS are .zip containing .rpm.pkg and other files.
I manually did the update on every IDS by ftp and command line and where the update succeeded I had to re-import the sensor on VMS, otherwise the version was not aligned.
Is this the power of a central management platform?

Similar Messages

Upgrade from IDS 4235 to IPS 5.0 license

Dear sirs. I have several 4235 sensors and SMARTnet 8x5xNBD contracts on each of them.
Have I upgrade their software to IPS v5.0 within this contracts or I should get licenses for the IPS?

Some one is feeding you a line of crap.
The main announcement for Cisco IDS version 5.0 has this 'fine print' at the bottom of the page:
"*Cisco IPS Sensor Software Version 5.0 is supported on the Cisco IDS 4215, IDS 4235, IPS 4240, IPS 4255, and IPS 4250-XL appliances and on the IDSM-2. It is supported in the promiscuous-based IDS mode only, for the IDS 4210 and the Cisco IDS Network Module (NM-CIDS).
Inline IPS services require more than one monitoring interface on Cisco IPS 4200 Series sensors."
This is posted at the following URL:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/prod_bulletin0900aecd801e65b9.html
Also, Cisco has stated the same thing in the 'Read Me' file that accompanies the software update:
"You can apply the IPS-K9-maj-5.0-1-S149.rpm.pkg major update to the following IDS & IPS version 4.1 sensors:
- IPS-42xx Cisco Intrusion Prevention System (IPS) sensors
- IDS-42xx Cisco Intrusion Detection System (IDS) sensors (except for the IDS-4220 and the IDS-4230 series)
- WS-SVC-IDSM2 series Intrusion Detection System Module (IDSM2)
- NM-CIDS IDS Network Module for Cisco 26xx, 3660, and 37xx Router Families
It is not compatible with the IDS-4220 and IDS-4230 series IDS sensors, the NRS-xx series IDS sensors, or the WS-X6381-IDS series Intrusion Detection System Module (IDSM)."
I hope this helps,
Alex Arndt

IDS 4235 upgrade problem

hi,
i have IDS 4235 running ver 4.1(1)S47
i want to upgrade it to act as ips i have upgrdae file IPS-K9-maj-5.0-1-S149.rpm.pkg when i start upgrade process i strats copying file from ftp to ids then i got a message
Error: This hardware platform, , is not supported in version 5.x
is there any solution for this problem

Hi,
Logon to your sensor to CLI. Run show users all to see your users. If there is one with a Privilege of Service, logoff and login again with that user account. If a service account does not exist (only one allowed), create one with the following:
configure terminal
username service privilege service
Best of Luck.

Cisco declares the IDS-4235 and IDS-4250 EOS/EOL

Just in case this isn't general knowledge, here are the official announcements WRT Cisco ending the sale of the afore mentioned IDS appliances, in order to make way for the new IPS appliances (The IPS-4240 and IPS-4255 respectively).
IDS-4235:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/prod_eol_notice0900aecd801d74d2.html
IDS-4250:
http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/prod_eol_notice0900aecd801d74d8.html
Those who are curious about the new products can check them out here...
IPS-4240:
http://www.cisco.com/en/US/products/ps5768/index.html
IPS-4255:
http://www.cisco.com/en/US/products/ps5769/index.html
Hope this info proves useful to someone other than myself,
Alex Arndt

I can state categorically that the signature updates for these platforms will continue as will software upgrades for some time in the future. They both will support 5.0 and I have not yet started a phase out of signature updates for these platforms. I can not state how long they will be supported, but would feel safe in saying that they will be supported with signature updates for at least the next year and possibly as long as 2 years.
As an example we EOS the 4230 over 2 years ago and still update signatures on it. 5.0 is the first SW upgrade to not support the 4230 platform.

IMS 5.1 and iDS 4.13 Upgrade

Hi all,
I'm putting together an environment for testing an upgrade from iMS 5.1 through to the current JES versions and I can't locate a copy of iMS 5.1 and iDS 4.13 - does anyone have a URL that they can be downloaded from?
I have them running in production but I'm looking for the original installation tar balls.
Thanks.
Cheers - Steve

The migration path from 4.1x to JES is non-trivial. I believe it's a two-stage upgrade, first to iDS 5.2 and then to JES. If I had to do this, I'd start with a fresh install of JES and then import my user data. You'll probably need to add/replace some attributes and objectclasses, but the Directory Server Resource kit (DSRK) has some nifty tools for doing this.
When I upgraded from 4.1x to iDS 5.2, I was migrating to a new box and it was just easier to do a fresh install. Besides, doing a fresh install means you can get away from the evil tarball and use the Sun package format and patch tools for future upgrades. Yes, there are patches for the tarball format, but I as I stated, I'm not a fan of the tarball install.
Another piece of advice, stick with schema 1. Then if you have the need, migrate to schema 2. Sun did a nice job of making schema 2 a seprate entity (for lack of a better term). In that going to schema 2 is a seperate set of procedures that you can do any time.
HTH,
Roger S.

Problem with ids 4235 and IDS MC 1.2

Hi
When I initial setup ids 4235 and installed IDS MC 1.2 completed.I want import the sensor into IDS MC,when I add sensor by select device>sensor and fill the blank request and select next,my browser stoped.
When you open control panel>service:tomcat.exe service stopped.
many thanks for help

Please make sure you have all the patches installed. Can anyone figure out other reasons for this?

Where is Bios_A04.exe for IDS-4235?

Hello All,
I just bought an old IDS-4235 and I need to upgrade its bios to a04. According to Cisco documentation, the BIOS_A04.exe should be in the recovery/upgrade CD. I have a CCO account, I downloaded various versions of upgrade/recovery images to look for this file but could not locate it? And by the way, how do I open files with pkg extension in Windows? Appreciate any help!

Since emailing executables is problematic, I'll attempt to post them here.
- Bob

Ids 4235 with single sensing interface

hi guys,
I have an IDS 4235 which i upgraded to 6.0(5)E3 version.
it has only one sension interface,now how can i keep it in inline mode??
any ideas please help.

With a single interface you'll need to trunk two vlans to your sensor, an "inside" and and "outside" vlan (just like a firewall) and configure your sensor for in-line vlan paris
http://www.cisco.com/en/US/docs/security/ips/6.0/configuration/guide/idm/dmInter.html#wp1029962

IDS 4235

Hi Everyone,
I have an IDS-4235 at a customer site. On one of the IDS runnig 4.1 version I am not able to configure an IP address on it. Its giving this, "Error : Could not restart the Network Services. Fatal Error has occured. Node must be rebooted to enable alarming." Is there anything I have to configure before giving it an IP address for management. If anyone can point me to any related documents then it will be helpful to me.
TIA
Faiz

Run "setup" and follow the prompts, make sure you include your IP in the allowed hosts. Don't worry about setting up NTP just yet.

New to IDS 4235.

hi,
can anybody tell me how to access the console of the IDS 4235.
My ids shows only
ttya login:
and I am unable to type anything on this prompt.

You will need to download the ISO CD image file from cisco.com.
Then use a CD burner to create a Recovery CD from that ISO file.
Put the CD into your sensor and reboot.
It should reboot from the CD and load a new image on the sensor.
http://tools.cisco.com/support/downloads/go/ImageList.x?relVer=6.0%285%29E3&mdfid=277026258&sftType=Intrusion+Prevention+System+%28IPS%29+System+Software&optPlat=&nodecount=2&edesignator=null&modelName=Cisco+IDS+4235+Sensor&treeMdfId=278875311&treeName=Intrusion+Prevention+System+%28IPS%29&modifmdfid=null&imname=&hybrid=Y&imst=N&lr=Y

IDS-4235 boots to GRUB after applying 6.0(3)E1

6.0(3)E1 patch applied successfully to our non-production IDS-4215. Applying the patch to our production IDS-4235 causes it to boot directly to grub> command prompt. It appears the system files are there. What command do I need to issue for grub to finish patching and can someone share the content of /boot/boot/grub.conf from IDS-4235 with 6.0(3)E1 so I can boot it manually? Thank you.

Matthew, appreciate you sharing the grub.conf content. As a note for others, from grub I was able to manually boot with the three lines from the default 'Cisco IPS' section:
root (hd0,0)
kernel /vmlinuz-2.4.30-IDS-smp-bigphys ro ramdisk_size=76800 rootrw=/dev/sda2 root=/dev/ram0 init=loadrc nousb console=ttyS0 htlblow=32 hugepages=176
initrd (hd0,0)/runtime.gz
As it turns out the 6.0(3)E1 service pack wiped the content of grub.conf file which is mounted as read only from /dev/boot as /boot. To restore the content of grub.conf as root user (after logging in with support account and doing "su -") remount the filesystem as read write with the following command:
mount -o remount,rw /dev/boot
After restoring grub.conf the appliance can be reloaded normally without manual intervention. Fortunately, it appears the patch broke early enough in the process that nothing else other than grub.conf, as far as I can tell, was affected. The appliance is reporting the prior 6.0(2)E1 version.
I just got off the phone with our reseller support and they and Cisco finally admitted that it's a known issue classified as unreleased bug after saying that IDS-4235 is not supported with 6.0(3)E1 service pack then saying a reimage is needed to fix the grub issue.

Upgrade of our 10.4.11 laptop to 10.5 is accomplished and we now need to upgrade Quicktime and iTunes; however, the user name and password is now not working after the upgrade to 10.5.

Object is to sync address and calendar between laptop with Max OS 10.4.11 and iPhone. Upgrade of our 10.4.11 laptop to 10.5 is accomplished and we now need to upgrade Quicktime and iTunes; however, the user name and password for the laptop is now not working after the upgrade to 10.5., though it was working prior to the upgrade, for file sharing.

@ BDAqua > I tried your suggestion but no luck. holding opt+command just gave me a blue screen and it rebotted, pushing the disk out of the drive. Yes, the macbook has 1 gb of ram. I realize that the min req. call for 2 gb of ram so i've got an order in for another dimm to put into the machine. Thanks for your suggestions.
@ a_brody > Yes. The machine was plugged into a power source. The disk promts you to do that and i recall aspect this form other installs. Thanks for the reminder tho! ( btw your second post is like greek to me man!)
@ Kuncklesmac > You're right about Snow Leopard being an upgrade from Leopard. I'm aware of this. And yes previously i've been told by Apple that I needed the Box Set (not the family pack. i am using the family pack for OS Snow Leopard) to upgrade my 10.4.11 mac - they never mentioned adding ram but i figured that out on my own and an apple specialist recommended it when i purchased Snow Leopard and confirmed that I coul duse the Snow Leopard to upgarde from Tiger (10.4.11). I've also read extensively (as i said above) that it isn't necessary (always) to buy the box set. Several 10.4.11 users report having upgraded using the Snow Leopard upgrade disk only (not the Box Set) without trouble on intel macs (also see the apple link i posted). So i'm just ondering how they did it and i cannot.
Thanks fo rall yor help!

Lenovo 3000 N200 ( 0769- A63) 0769 BAG processor upgrade limit and type

i have folloing system properties
TYPE
0769-A63
07/12
Name
Lenovo 3000 N200 Notebook (0769-A63)
Specs
Based on 0769-BAG: T2330(1.6GHz), 2GB RAM, 120GB 5400rpm HD, 15.4in 1280x800 LCD, Intel X3100, CDRW/DVDRW, Intel
802.11abg wireless, Bluetooth, Modem, 10/100 Ethernet, Secure chip, Fingerprint reader, Camera, 6c Li-Ion, DOS
License
Chipset: Intel 965 Express Chipset probably
i want to upgrade my processor to core2duo etc
what will be the type/types of processor/s that can be used to upgrade it and what is the upper limit of speed of processor that can be attached
thanks
Moderator Note; s/n edited for member's own protection

Wow, thank you, what an awesome little tool!
So, I found that these 2 RAM products are compatible with my laptop:
Part Number: CT758799
Module Size: 2GB
Package: 200-pin SODIMM
Feature: DDR2 PC2-6400
Specs: DDR2 PC2-6400 • CL=6 • Unbuffered • NON-ECC • DDR2-800 • 1.8V • 256Meg x 64 •
Part Number: CT699699
Module Size: 2GB
Package: 200-pin SODIMM
Feature: DDR2 PC2-5300
Specs: DDR2 PC2-5300 • CL=5 • Unbuffered • NON-ECC • DDR2-667 • 1.8V • 256Meg x 64 •
I then went to a well-known auction site and found RAM cards from the same manufacturer with exactly the same specs as above but with different Part numbers. Does it have to be the exact part number or do I stand a good chance of it working if it has the required spec? I searched for the exact part numbers and yielded 0 results.
Thanks for all your help on this.

Download or upgrade current and free apps says there's a billing problem with previous purchase previous purchase what can I do to fix it

Every time I try to download a free app or even upgrade any of my apps for free it tells me to put my Apple ID I do that then it say there a billing problem with previous purchases. So I click continue and put in my debit card information correctly but still won't work it always declines it and says he's different payment method. what can I do it's been like that for 3 months that's the only card I have.

Hi ..
I replied to you here > Download or upgrade current and free apps says there's a billing problem with previous purchase previous purchase what can I do to fix it

Upgrading RAM and SSD on MacBook Pro 15" mid 2009

Hey,
I want to upgrade RAM and SSD on my macbook pro, identifier 5,3, and I want to make sure the parts I picked will be compatible with my Macbook.
I'm specifically not sure about its support of 512GB.
I thought about RAM:
http://www.amazon.com/Crucial-PC3-8500-SODIMM-204-Pin-CT2K4G3S1067M/dp/B008LTBJF M/ref=sr_1_1?ie=UTF8&qid=1420487078&sr=8-1&keywords=DDR3+PC3-8500
SSD:
http://www.amazon.com/Crucial-MX100-adapter-Internal-CT512MX100SSD1/dp/B00KFAGCU M/ref=sr_1_1?ie=UTF8&qid=1420486598&sr=8-1&keywords=CT512MX100SSD1
Thanks!

" I have also created a back up on Time Machine (I think I did)."
Check this out:
http://macintoshhowto.com/repair/back-up-computer.html
Once you think you've done it correctly restart and hold down the option key or go to "System Preferences" under the Apple and look at "Startup Disk".
That will tell which Disks are bootable.
Now about that Crucial drive:
http://forum.crucial.com/t5/Crucial-SSDs/512GB-M4-and-2009-Macbook-Pro/td-p/7805 6
It's not clear to me that this issue was resolved. The last post goes nowhere!
I always use OWC:
http://eshop.macsales.com/shop/SSD/OWC
Just did two including this MacBook Pro early 2011 13" and a 2012 Mini. Total no-brainer! The way I like it.

Upgrading IDSM2 and IDS 4235

Similar Messages

Maybe you are looking for