MARS Signatures

Answered Question
Apr 22nd, 2008
User Badges:

Our CS-MARS 50 is at 4.2.6. Is it possible to update the signatures on it?



Correct Answer by mhellman about 9 years 1 month ago

Yes, until you get to at least a certain version of MARS. And even then, only updates to the Cisco IDS signatures are done without the version upgrade.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
mhellman Wed, 04/23/2008 - 05:13
User Badges:
  • Blue, 1500 points or more

Yes, you need to apply the latest patches. They're not cumulative, so they all have to applied. So, 4.2.7, 4.2.8, 4.3.1, 4.3.2, 4.3.3, 4.3.4. At some point (4.3.1 maybe?) MARS does get separate update functionality for Cisco IDS/IPS signatures only...but you may as well get updated all the way.


http://www.cisco.com/cgi-bin/tablebuild.pl/cs-mars

scootertgm Wed, 04/23/2008 - 06:30
User Badges:

OK, I need to update the OS on the the box to be able to update the IPS signatures then?

Correct Answer
mhellman Wed, 04/23/2008 - 07:42
User Badges:
  • Blue, 1500 points or more

Yes, until you get to at least a certain version of MARS. And even then, only updates to the Cisco IDS signatures are done without the version upgrade.

Solobone22 Sun, 04/27/2008 - 20:48
User Badges:

not sure where to ask this but here it goes....i'm currently running a beta version of 4.3.4 on one of our MARS appliances. do i have to roll it back to a previous version to upgrade to the full version of 4.3.4 or can I install it over the beta version? any help would be greatly appreciated.

Actions

This Discussion