MARS IPS Updates not working

gmherring · ‎11-07-2007

Anyone having a problem with the automaticaly IPS signature update feature in MARS 4.3.1?

I have tried to get them from CCO and I have downloaded the updates to a local server and it stil does not work. As is usual there is not a specific log somewhere that tells you what is missing.

Is there anyway to manually update the IPS signatures from the CLI? For us this has proven to be the only way to update the MARS appliance.

mhellman · ‎11-07-2007

Have you tried getting a trace? Do you need to configure a proxy for outbound HTTP?

ghalleen · ‎11-28-2007

Check and make sure DNS is configured in MARS. I've seen this be the problem several times.

pmccubbin · ‎11-29-2007

Hi Gary,

Thanks for dropping by this forum. I have your book, "Security Monitoring with Cisco Security MARS" and couldn't imagine doing an implementation for a customer without it nearby.

I've got a few Product Enhancement Requests which my customers have passed along to me. I'll combine them in a separate post under the General Security section.

Cheers!

Paul