Cisco IPS-4255-K9 Installation Guide - Page 333

Chapter A Troubleshooting Troubleshooting the Appliance Issues With Automatic Update The following list provides suggestions for troubleshooting automatic updates: • Run TCPDUMP - Create a service account. Su to root and run TCPDUMP on the command and control interface to capture packets between the sensor and the FTP server. - Use the upgrade command to manually upgrade the sensor. - Look at the TCPDUMP output for errors coming back from the FTP server. • Make sure the sensor is in the correct directory. The directory must be specified correctly. This has caused issues with Windows FTP servers. Sometimes an extra "/" or even two "/" are needed in front of the directory name. To verify this, use the same FTP commands you see in the TCPDUMP output through your own FTP connection. • You must use the Windows FTP server setup option to emulate UNIX file structure and not MS-DOS file structure. • If you are using SCP, make sure you have added the SSH host key to the known hosts list. Try the manual upgrade command before attempting the automatic update. If it works with the upgrade command and does not work with the automatic update, try the following: • Determine which IPS software version your sensor has. • Make sure the passwords are configured for automatic update. Make sure they match the same passwords used for manual update. • Make sure that the filenames in the FTP server are exactly what you see on Downloads on Cisco.com. This includes capitalization. Some Windows FTP servers allow access to the file with the incorrect capitalization but the sensor ultimately rejects the file because the name has changed. • If necessary, run TCPDUMP on automatic update. You can compare the successful manual update with the unsuccessful automatic update and troubleshoot from there. For More Information • For the procedure for creating the service account, see Creating the Service Account, page A-5. • For the procedure for reimaging your sensor, see Chapter 12, "Upgrading, Downgrading, and Installing System Images." • For the procedure for adding hosts to the SSH known hosts list, refer to Adding Hosts to the SSH Known Hosts List. • For the procedure for determining the software version, see Displaying Version Information, page A-74. Updating a Sensor with the Update Stored on the Sensor You can store the update package in the /var directory on the sensor and update the sensor from there if you need to. To update the sensor with an update stored on the sensor, follow these steps: Step 1 Step 2 Log in to the service account. Obtain the update package file from Cisco.com. OL-18504-01 Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0 A-55