IPS Automatic Updates

nilanjans · ‎09-01-2008

Hi,

I was discussing with one of our customers who needs a Cisco IPS on ASA. We are proposing ASA5510-AIP-10-K9 for their Internet FIrewall + IPS features. Now customer also wants the IPS Signature updates to be automated. Please let us know what the process is to enable the same, starting from CIsco Services we need to opt for, the GUI / CLI scripts to enable the same and son on. Please let me know what all components are actually required to be positioned with the ASA Hardware for enabling this feature. Will be helpful if reverted at the earleist.

Thanks in advance...

smalkeric · ‎09-05-2008

When you enable automatic updates, the sensor logs in to Cisco.com and checks for signature and signature engine updates. When an update is available, the sensor downloads the update and installs it.Automatic updates do not work with Windows FTP servers configured with DOS-style paths. Make sure the server configuration has the UNIX-style path option enabled rather than DOS-style paths

The following URL will help you in configuring automatic updates:

http://www.cisco.com/en/US/docs/security/ips/6.1/configuration/guide/idm/idm_sensor_management.html#wp2016040