McAfee KnowledgeBase - How to perform a Sensor software downgrade https://kc.mcafee.com/corporate/index?page=content&id=KB70542&c...

ServicePortal

Knowledge Center

How to perform a Sensor software downgrade

Technical Articles ID: KB70542
Last Modified: 1/16/2014

Affected Products
Network Security Sensor Appliance 7.1.x
Network Security Sensor Appliance 6.x (EOL)

Rated:

Environment
McAfee I-Series Sensor Hardware
McAfee M-Series Sensor Hardware
Summary
This article explains how to downgrade the installed software on a Sensor.
Solution
IMPORTANT: The configuration process for the Sensor, including the Shared Secret, TFTP server configuration, update process, and all
other settings, is documented in the product documentation specific to your Sensor Software and Hardware version. McAfee recommends
consulting the Quick Start guide and the Sensor Configuration guides for detailed steps.
Obtain the software and place it on the server
1. Download the software image (for example, sensorsw_1400_6015.jar) from the McAfee website to the TFTP server. This file is
compressed in a .JAR file.
NOTE: Ensure you download the correct Sensor image for the Sensor model and the software version that is installed on the
Manager.
McAfee product software, upgrades, maintenance releases, and documentation are available from the McAfee Downloads site at:
http://www.mcafee.com/us/downloads/downloads.aspx.
NOTE: You will need a valid Grant Number for access. KB56057 provides additional information about the McAfee Downloads site,
as well as alternate locations for some products.
2. Extract the files from the .JAR file. To do this, rename the file to a .zip extension if required and extract the contents.
3. Save the image file (sensorsw_xx00_xxxxx) to the /tftpboot directory.
NOTE: Refer to the TFTP server documentation for specific instructions on how to place the Sensor software on the TFTP server.

From the Sensor console

1. Log on to the Sensor. The default user name is admin and the default password is admin123.
NOTE: McAfee strongly recommends changing the password.
2. Specify the IP address of the TFTP server to identify it to the Sensor.
3. At the prompt, type: set tftpserver ip <IP address>
Example: set tftpserver ip 192.34.2.8
4. Load the image file on the Sensor:
At the prompt, type loadimage <Sensor Software FileName> and press ENTER.
Example: loadimage sensorsw_1400_6015
You see a message after the image has loaded.
5. Type resetconfig and press ENTER. This clears the previous software configuration files.
6. Retype the Sensor information as documented in the Sensor Configuration Guide or the Quick Start Guide for your Sensor/Sensor
software version.
For a full list of product documents, go to the McAfee ServicePortal at: http://support.mcafee.com. Click Knowledge Center, and
select Product Documentation from the Knowledge Base list.
7. Set the Sensor shared secret key.
After you have established trust between the Sensor and the Manager, the signature set currently on the Manager is pushed down
to the Sensor. For example, Manager 6.x.x.x is bundled with a specific 6.x signature set. That version will be pushed to the Sensor.
Now the Sensor is initialized and the View Details window displays a valid signature set.
NOTE: You can optionally download a different signature set to the Manager and then push it to the Sensor.
Related Information
Downgrade sensor software version limitation
There is no software version limitation when downgrading. For example, you can downgrade from 6.1.x to 4.1.x directly.
resetconfig deletes the following values:

1 of 2Print to PDF without this message by purchasing novaPDF (http://www.novapdf.com/)

11/5/2014 12:51 PM

McAfee KnowledgeBase - How to perform a Sensor software downgrade https://kc.mcafee.com/corporate/index?page=content&id=KB70542&c...

Manager address (and secondary interface IP address, if configured). This can be an IPv4 or IPv6 address
Certificates establishing trust between Sensor and Manager (shared key value)
Signatures
TFTP server IP address (IPv4 or IPv6 address)
DoS profile files (learned DoS behavior)
SSL Key
Alert Filter
ACL
Advanced Setting
resetconfig resets the following values to default:
Monitoring and Response port settings
Management port settings
Manager Install port value
Manager Alert port value
Manager Log port value

Resources

Tools

Service Requests

Beyond ServicePortal

Product Documentation

McAfee Virtual Technician (MVT)

View Service Requests

Search Threat Library

Product End of Life (EOL)

Minimum Escalation Requirements (MER)

Create a Service Request

McAfee Customer Community

Support Documentation

Endpoint Encryption Code of the Day

Submit a Sample

Product Enhancement Request

Global Solutions Lab

Combine Extra.DAT Files

Training and Professional Services

My Company Entitlements

McAfee Support Notification Service (SNS)

Home and Home Office Technical Support

Careers Contact Us Website Feedback Privacy Legal Notices Legal & Contract Terms Site Map
2003-2014 McAfee, Inc.

2 of 2Print to PDF without this message by purchasing novaPDF (http://www.novapdf.com/)

11/5/2014 12:51 PM