D-2
Cisco Intrusion Prevention System Appliance Hardware Installation Guide for IPS 7.1
OL-24002-01
Appendix D Upgrading, Downgrading, and Installing System Images
Upgrades, Downgrades, and System Images
• You cannot use the downgrade command to revert to a previous major or minor version, for
example, from Cisco IPS 7.1 to 7.0. You can only use the downgrade command to downgrade from
the latest signature update or signature engine update. To revert to 7.0, you must reimage the sensor.
• You cannot downgrade the sensor using the recovery partition. To downgrade to an earlier version,
you must install the appropriate system image file (.img file).
• During a signature upgrade all signature configurations are retained, both the signature tunings as
well as the custom signatures. During a signature downgrade the current signature configuration is
replaced with the old signature configuration. So if the last signature set had custom signatures
and/or signature tunings, these are restored during the downgrade.
• All user configuration settings are lost when you install the system image. Before trying to recover
the sensor by installing the system image, try to recover by using the recover application-partition
command or by selecting the recovery partition during sensor bootup.
Upgrades, Downgrades, and System Images
Caution You cannot use the downgrade command to revert to a previous major or minor version, for example,
from Cisco IPS 7.1 to 7.0. You can only use the downgrade command to downgrade from the latest
signature update or signature engine update. To revert to 7.0, you must reimage the sensor.
Note You cannot downgrade the sensor using the recovery partition. To downgrade to an earlier version, you
must install the appropriate system image file (.img file).
Note During a signature upgrade all signature configurations are retained, both the signature tunings as well
as the custom signatures. During a signature downgrade the current signature configuration is replaced
with the old signature configuration. So if the last signature set had custom signatures and/or signature
tunings, these are restored during the downgrade.
You can upgrade and downgrade the software on the sensor. Upgrading applies a service pack, signature
update, signature engine update, minor version, major version, or recovery partition file. Downgrading
removes the last applied service pack or signature update from the sensor.
You can recover the application partition image on your sensor if it becomes unusable. Using the recover
command lets you retain your host settings while other settings revert to the factory defaults.
To install a new system image on the sensor, use ROMMON, the bootloader file, or the maintenance
partition depending on which platform you have. When you install a new system image on your sensor,
all accounts are removed and the default cisco account is reset to use the default password cisco. After
installing the system image, you must initialize the sensor again.
After you reimage and initialize your sensor, upgrade your sensor with the most recent service pack,
signature update, signature engine update, minor update, major update, and recovery partition files.
For More Information
• For the procedure for initializing the sensor, see Appendix B, “Initializing the Sensor.”
• For the procedure for locating software on Cisco.com, see Obtaining Cisco IPS Software, page C-1.
Comments to this Manuals