MARS Signatures

Answered Question
Apr 22nd, 2008

Our CS-MARS 50 is at 4.2.6. Is it possible to update the signatures on it?

I have this problem too.
0 votes
Correct Answer by mhellman about 8 years 9 months ago

Yes, until you get to at least a certain version of MARS. And even then, only updates to the Cisco IDS signatures are done without the version upgrade.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
mhellman Wed, 04/23/2008 - 05:13

Yes, you need to apply the latest patches. They're not cumulative, so they all have to applied. So, 4.2.7, 4.2.8, 4.3.1, 4.3.2, 4.3.3, 4.3.4. At some point (4.3.1 maybe?) MARS does get separate update functionality for Cisco IDS/IPS signatures only...but you may as well get updated all the way.

http://www.cisco.com/cgi-bin/tablebuild.pl/cs-mars

scootertgm Wed, 04/23/2008 - 06:30

OK, I need to update the OS on the the box to be able to update the IPS signatures then?

Correct Answer
mhellman Wed, 04/23/2008 - 07:42

Yes, until you get to at least a certain version of MARS. And even then, only updates to the Cisco IDS signatures are done without the version upgrade.

Solobone22 Sun, 04/27/2008 - 20:48

not sure where to ask this but here it goes....i'm currently running a beta version of 4.3.4 on one of our MARS appliances. do i have to roll it back to a previous version to upgrade to the full version of 4.3.4 or can I install it over the beta version? any help would be greatly appreciated.

Actions

This Discussion