Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual page 333

Chapter A Troubleshooting
Issues With Automatic Update
The following list provides suggestions for troubleshooting automatic updates:
•
•
•
•
Try the manual upgrade command before attempting the automatic update. If it works with the upgrade
command and does not work with the automatic update, try the following:
•
•
•
•
For More Information
•
•
•
•
Updating a Sensor with the Update Stored on the Sensor
You can store the update package in the /var directory on the sensor and update the sensor from there if
you need to. To update the sensor with an update stored on the sensor, follow these steps:
Log in to the service account.
Step 1
Obtain the update package file from Cisco.com.
Step 2
OL-18504-01
Run TCPDUMP
Create a service account. Su to root and run TCPDUMP on the command and control interface
–
to capture packets between the sensor and the FTP server.
Use the upgrade command to manually upgrade the sensor.
–
Look at the TCPDUMP output for errors coming back from the FTP server.
–
Make sure the sensor is in the correct directory.
The directory must be specified correctly. This has caused issues with Windows FTP servers.
Sometimes an extra "/" or even two "/" are needed in front of the directory name.
To verify this, use the same FTP commands you see in the TCPDUMP output through your own FTP
connection.
You must use the Windows FTP server setup option to emulate UNIX file structure and not MS-DOS
file structure.
If you are using SCP, make sure you have added the SSH host key to the known hosts list.
Determine which IPS software version your sensor has.
Make sure the passwords are configured for automatic update. Make sure they match the same
passwords used for manual update.
Make sure that the filenames in the FTP server are exactly what you see on Downloads on
Cisco.com. This includes capitalization.
Some Windows FTP servers allow access to the file with the incorrect capitalization but the sensor
ultimately rejects the file because the name has changed.
If necessary, run TCPDUMP on automatic update. You can compare the successful manual update
with the unsuccessful automatic update and troubleshoot from there.
For the procedure for creating the service account, see
For the procedure for reimaging your sensor, see
Installing System Images."
For the procedure for adding hosts to the SSH known hosts list, refer to
Known Hosts List.
For the procedure for determining the software version, see
page A-74.
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
Troubleshooting the Appliance
Creating the Service Account, page
Chapter 12, "Upgrading, Downgrading, and
Adding Hosts to the SSH
Displaying Version Information,
A-5.
A-55