IPS Signature Dynamic Update

Unanswered Question
Farrukh Haroon Mon, 05/26/2008 - 21:52

Since the IPS dynamic update is accessed from the Admin tab, only the accounts having Admin privilege can change/modify the dynamic update settings, Here is a description of the various user roles in CS-MARS (taken directly from the user guide):

.

•Admin: has full use of the MARS.

•Notification Only: for a non-user of the MARS appliance, use this to send alerts to people who are not administrators, security analysts, or operators.

•Operator: has read-only privileges.

•Security Analyst: has full use of the MARS, except cannot access the Admin tab

Hope this helps

Farrukh Haroon Tue, 05/27/2008 - 06:29

Oh you mean that :)

For signature updates you need the Cisco Services for IPS, please find more information on the following link:

http://www.cisco.com/en/US/products/ps6076/serv_group_home.html

You can find the Data Sheet,Q&A and a presentation on that link.

Once you get the service contract to your CCO, MARS can connect direct to the Cisco website to upload the latest signature updates. (The IPS sensors need to be updated separately).

Regards

Farrukh

Actions

This Discussion