 Feedback
|
Table Of Contents
Release Notes for Cisco Security MARS Appliance 6.1.4
Downloading the Upgrade Package from CCO
Open Caveats for Supporting Devices
Resolved Caveats —Release 6.1.4
Resolved Caveats —Releases Prior to 6.1.4
Obtaining Documentation, Obtaining Support, and Security Guidelines
Release Notes for Cisco Security MARS Appliance 6.1.4
Last Published: December 13, 2011
Note
We sometimes update the printed and electronic documentation after original publication. Therefore, you should review the documentation on Cisco.com for any updates.
These release notes are for use with the Cisco Security Monitoring, Analysis, and Response System (MARS) Release 6.1.4, running on any supported MARS Appliance model listed in Supported Hardware.
This chapter contains the following topics:
•
Introduction
Release 6.1.4 is now available as an upgrade of 6.1.3 of your software release in support of the MARS Appliance models as identified in Supported Hardware. Registered SMARTnet users can obtain release 6.1.4 from the Cisco support website at the following URL:
http://www.cisco.com/go/mars/
Open the page and then click the Download Software link in the Support box on the right side of the MARS product home page.Supported Hardware
Release 6.1.4 supports the following Cisco Security MARS Appliance models:
Local Controller Appliances: 2nd Generation
•
•
•
•
•
•
Local Controller Appliances: 1st Generation
•
•
•
•
•
•
Global Controller Appliances: 2nd Generation
•
•
Global Controller Appliances: 1st Generation
•
•
New Features
This release includes contains no new features. It is a release dedicated to signature updates.
Changes and Enhancements
All changes made in this release are related to the signatures.
Note
New Vendor Signatures
The following table describes the most recent signatures supported for each product or technology:
Upgrade Instructions
The MARS upgrade packages are the primary vehicle for major, minor, and patch software releases. In addition to addressing high-priority caveats, upgrade packages update system inspection rules, event types, and provide the most recent signature support.
For detailed instructions on planning and performing an upgrade or installation, refer to "Checklist for Upgrading the Appliance Software" in the Cisco Security MARS Initial Configuration and Upgrade Guide.
Important Upgrade Notes
To ensure that the upgrade from earlier releases is trouble free, this section contains the notes provided in previous releases according the release number. Please refer to the notes that pertain to the release you are upgrading from and any releases following that one.
General Notes
The following general notes apply to this release:
•
•
•
–
–
The fsck operation takes a long time to complete, which can result in significant unplanned downtime when rebooting the system after meeting a condition above. For example, a MARS 50 appliance can take up to 90 minutes to perform the operation.
Upgrade to 6.1.3
No important notes exist for the 6.1.3 upgrade.
Upgrade to 6.1.2
No important notes exist for the 6.1.2 upgrade.
Upgrade to 6.1.1
If you are upgrading from Windows 2003 to Windows 2008, ensure that any ancillary devices and software you employ are supported. For more information see Supported and Interoperable Devices and Software for Cisco Security MARS Local Controller 6.x.
Upgrade to 6.0.8
No important notes exist for the 6.0.8 upgrade.
Upgrade to 6.0.7
If you are upgrading from Windows 2003 to Windows 2008, ensure that any ancillary devices and software you employ are supported. For more information see Supported and Interoperable Devices and Software for Cisco Security MARS Local Controller 6.x.
Upgrade to 6.0.6
No important notes exist for the 6.0.6 upgrade.
Upgrade to 6.0.5
The 6.0.5 release is a general bug fix and signature update release for all MARS appliance models. However, it offers new functionality for an existing CS-MARS 110R when you order and install a FIPS-compliant PCI card. Once installed, you can configure FIPS-specific features within MARS. For more information, see the CS-MARS FIPS PCI CARD Quick Install document.
Upgrade to 6.0.4
No important notes exist for the 6.0.4 upgrade.
Upgrade to 6.0.3
No important notes exist for the 6.0.3 upgrade.
Upgrade to 6.0.2
No important notes exist for the 6.0.2 upgrade.
Upgrade to 6.0.1
The upgrade process to 6.0.1 differs based on the release you are upgrading from. If you are upgrading a 5.x release, you can upgrade to 6.0.1 if you are running 5.3.6. The upgrade from 5.3.6 to 6.0.1 takes several hours, as it also upgrades the Oracle database running on the appliance. If you are running an earlier 5.x release, you must first upgrade to 5.3.6 .
However, if you are upgrading a 4.x release, you must migrate the system instead of upgrading. To migrate from a 4.x, you must follow the step-by-step instructions specified in the Migrating Data from Cisco Security MARS 4.x to 6.0.1.
Note
Upgrade Path Matrix
When upgrading from one software release to another, a prerequisite release is always required. This prerequisite release is the minimum level required to be running on the appliance before you can upgrade to the most recent release. Table 1 identifies the upgrade path that you must follow to reach the minimum level required to upgrade to current release.
Table 1 Upgrade Path Matrix
4.3.6
6.0.1
Migration required. See Migrating Data from Cisco Security MARS 4.x to 6.0.1
5.3.6
6.0.1
csmars-6.0.1.3066.pkg
6.0.1 (3066) or 6.0.1 (3070)
6.0.2
csmars-6.0.2.3102.zip
6.0.2
6.0.3
csmars-6.0.3.3186.zip
6.0.3
6.0.4
csmars-6.0.4.3229.zip
6.0.4
6.0.5 no FIPS support
csmars-6.0.5.3358.iso/zip
6.0.5 with FIPS support
csmars-6.0.5.3361-FIPS.iso/zip
6.0.5
6.0.6
csmars-6.0.6.3367.zip
6.0.6
6.0.7
csmars-6.0.7.3403.zip
6.0.7
6.0.8
csmars-6.0.8.3427.zip
6.0.8
6.1.1
csmars-6.1.1.3445.zip
6.1.1
6.1.2 no FIPS support
csmars-6.1.2.3466.zip
6.1.2 with FIPS support
csmars-6.1.2.3466.iso
6.1.2
6.1.3
csmars-6.1.3.3501.zip
6.1.3
6.1.4
csmars-6.1.4.3506.zip
Downloading the Upgrade Package from CCO
Upgrade images and supporting software are found on the CCO software download pages dedicated to MARS. You can access these pages at the following URLs, assuming you have a valid CCO account and that you have registered your SMARTnet contract number for your MARS Appliance
Top-level page:
•
And then click the Download Software link in the Support box on the right side of the MARS product home page.
Result: The Download Software page loads.
From the Download Software page, select one of the following options:
•
•
•
•
•
Note
For information on obtaining a CCO account, see the following URL:
•
Documentation Errata
The Cisco Security MARS 6.x Documentation Guide and Warranty details user documentation for this release.
Important Notes
No important notes exist for the 6.1.4 upgrade.
Caveats
This section describes the open and resolved caveats with respect to this release.
For your convenience in locating caveats in Cisco's Bug Toolkit, the caveat titles listed in this section are drawn directly from the Bug Toolkit database. These caveat titles are not intended to be read as complete sentences because the title field length is limited. In the caveat titles, some truncation of wording or punctuation may be necessary to provide the most complete and concise description. The only modifications made to these titles are as follows:
•
•
•
Note
http://www.cisco.com/support/bugtools
To become a registered cisco.com user, go to the following website:
http://tools.cisco.com/RPF/register/register.do
This section contains the following topics:
•
•
•
Open Caveats for Supporting Devices
The following caveats affect this release and are part of supported devices or compatible products:
FWSM Syslog message FWSM-6-302013 with wrong Real and Mapped IP
Open Caveats— Release 6.1.4
The following caveats affect this release and are part of MARS. This list is not to be considered comprehensive.
MARS - GC/LC communication disruption can result in out-of-sync objects
The /tmp directory can get filled with config files
Resolved Caveats —Release 6.1.4
The following customer found or previously release noted caveats have been resolved in this release.
Resolved Caveats —Releases Prior to 6.1.4
For the list of caveats resolved in releases prior to this one, see the following documents:
•
Product Documentation
For the complete list of documents supporting this release, see the release-specific document road map:
•
http://www.cisco.com/en/US/products/ps6241/products_documentation_roadmaps_list.html
Lists document set that supports the MARS release and summarizes contents of each document.
•
Note
Obtaining Documentation, Obtaining Support, and Security Guidelines
For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS Version 2.0.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
© 2011 Cisco Systems, Inc. All rights reserved.
