01-26-2009 06:41 PM
I have a CSM 3.1. I wanted to update my IPS AIP-SSM 10 using CSM.
How does CSM do the updating will it update the sensors incrememtatly?
Cause if my sensor is on a older version will CSM just update it to the latest without regards whether it is able to support?
Do i need to do a rediscover of device via the live device option to make sure CSM is in syn with the IPS?
How to revert if an rediscovery is applied?
02-01-2009 07:44 PM
Click on the Tools menu and Select Apply IPS Update to install the latest IPS signatures.
Select the Latest Signature file and Click "Next
Select the devices on which the IPS update has to be applied and click Next.
For further information click this link.
02-10-2009 06:13 PM
I am unable to download updates using CSM. I have opened firewall for outgoing ports and indicate my proxy server. What is the problem now?
The error is
-->Unable to communicate with locator service to retrieve available files.
04-01-2009 01:14 AM
Just to bump this thread back up again I now have the same problem
04-01-2009 07:59 AM
CSM Needs a valid CCO Login ID under which the IPS device/Serial is added for Signature updates. If it is not the case then u can run into such errors.
04-03-2009 05:21 AM
Thats the problem it has got the correct details - they are what I used to download the patches manually.
Are there any log files on the system which will show me what is happenning when it tried to download the files?
Thanks
Giles
04-06-2009 08:19 AM
Hi,
Has anyone fold a solution to this problem as I have it also and it is driving me a little nuts!
Mark
04-08-2009 04:51 AM
just done a bit more digging....
there is a file in the following directory
c:\program files\cscopx\mdc\ips\etc
called sensorupdate.properties.
In this file is the following entry
# URL for signature download
sigIdLink:http://tools.cisco.com/security/center/prsc/viewSignature.x?
Can someone tell me if this is where the downloads should be retrieved from. I tried accessing the URL from the server but it wouldn't work. However the server itself can download the update files manually using the same login details as the program.
Thanks in advance
Giles
06-10-2013 02:37 AM
Hi everybody.
I still have the same problem with CSM 4.3 SP1.
As bgl-group pointed out there are some url's in the cscopx\mdc\ip\etc\sensorupdate.properties files.
"
# URL for signature download
sigIdLink:http://tools.cisco.com/security/center/prsc/viewSignature.x?
# URL for CCO Locator. Refer CSCsz13376 for details.
# CSCth05675 : Chnaged the URL to SPRIT
# In order to test the payload re-direction please enter the URL in the same property
ccoLocatorURL:https://www.cisco.com/cgi-bin/front.x/ida/locator/locator.pl
# Retry count for CCO download
# If the CSM is not able to contact CCO due to server side issues or due to invalid response sent from CCO
# CSM will retry with the no of times as the value of the count metnioned below(with in time interval being the random time from 5-15 minutes)
# By default the retry count value is 3
filelistRetryCount:3
"
Did anyone have the chance of verify woking properties? Ours are still default, but we constantly have problems with the updates (the used cco-account does have permissions to downoad ips signatures)
Thanx in advance
Jarle
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide