How do you handle automatic updates?

Unanswered Question
Feb 7th, 2008

Do you have your IPS signatures automatically update? I'm considering not allowing the automatic updates to come in and doing it manually once a month if it's that frequent.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
mhellman Thu, 02/07/2008 - 15:32

We don't because we don't use CSM, but otherwise probably would. Ever since the engine updates were removed from the sig updates, they've been solid.

However, we use our own internal SSH server for updates and point the sensors at it. We review the new signatures/changes with each release and make a determination as to whether to apply to production. If so, we put the new release in a directory on a SSH server and the updates get applied within the hour.


This Discussion