Manually copy the image to each stack member’s flash.
Test the image in a lab environment if possible.
Via USB (faster):
Switch# show version | include IOS Cisco IOS-XE Software, Version 03.06.10E IOS (tm) CAA_UNIVERSALK9 Software (CAA_UNIVERSALK9-M), Version 15.2(2)E10
The image is ideal for:
Includes robust security protocols such as IEEE 802.1X port security, TrustSec, and Access Control Lists (ACLs) to protect the network edge.
Native deep-packet inspection and visibility for security monitoring at the edge. cat3k-caa-universalk9.spa.03.06.10.e.152-2.e10.bin
Cisco categorizes its software releases into Standard Maintenance (short lifecycle) and Extended Maintenance (long lifecycle) trains. Release 3.6.10E is a mature iteration of an Extended Maintenance train.
: This is the IOS XE version. It indicates Release 3.6, Maintenance Release 10, Extended Support. Manually copy the image to each stack member’s flash
This release was critical for patching the (CVE-2016-6415) and various TCP stack vulnerabilities. If you are running a switch that terminates VPNs or uses SSH management, this image closes several remote-code-execution paths.