Filter
Top Products
22-3
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 22 Upgrading, Downgrading, and Installing System Images
Supported FTP and HTTP/HTTPS Servers
Note During a signature upgrade all signature configurations are retained, both the signature tunings as well
as the custom signatures. During a signature downgrade the current signature configuration is replaced
with the old signature configuration. So if the last signature set had custom signatures and/or signature
tunings, these are restored during the downgrade.
You can upgrade and downgrade the software on the sensor. Upgrading applies a service pack, signature
update, signature engine update, minor version, major version, or recovery partition file. Downgrading
removes the last applied service pack or signature update from the sensor.
You can recover the application partition image on your sensor if it becomes unusable. Using the recover
command lets you retain your host settings while other settings revert to the factory defaults.
To install a new system image on the sensor, use ROMMON, the bootloader file, or the maintenance
partition depending on which platform you have. When you install a new system image on your sensor,
all accounts are removed and the default cisco account is reset to use the default password cisco. After
installing the system image, you must initialize the sensor again.
After you reimage and initialize your sensor, upgrade your sensor with the most recent service pack,
signature update, signature engine update, minor update, major update, and recovery partition files.
For More Information
• For the procedure for initializing the sensor, see Basic Sensor Setup, page 3-5.
• For the procedure for locating software on Cisco.com, see Obtaining Cisco IPS Software, page 21-1.
Supported FTP and HTTP/HTTPS Servers
The following FTP servers are supported for IPS software updates:
• WU-FTPD 2.6.2 (Linux)
• Solaris 2.8
• Sambar 6.0 (Windows 2000)
• Serv-U 5.0 (Windows 2000)
• MS IIS 5.0 (Windows 2000)
The following HTTP/HTTPS servers are supported for IPS software updates:
• CSM - Apache Server (Tomcat)
• CSM - Apache Server (JRun)
For More Information
• For the procedure for downloading IPS software updates from Cisco.com, see Obtaining Cisco IPS
Software, page 21-1.
• For the procedure for configuring automatic updates, see Configuring Automatic Upgrades,
page 22-8.