cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
496
Views
0
Helpful
2
Replies

process to retiring signatures

jan.odzgan
Level 1
Level 1

Hello.

Can I find reason for retiring signatures in signatures update ?

I mean information like this:

XXXX/0 - "IE buffer overflow" - retired due to time (vulnerability was published 5 years ago)

XXXY/0 - "Firefox buffer overflow" - retired due to many false positive (non-specific regular expression)

XXXZ/0 - "RPC ..." - retired due to performance reason (memory exhaustion)

When I download information about current signatures update, I can't see why signatures were retired.

Thanks

2 Replies 2

PWCSinfosec
Level 1
Level 1

I have actually been looking for this type of informtion, where are you even finding the info?

Hi

It will be good if cisco technics will be add reason of retiring signatures to release notes and to signature desciption in security center (and intellishield too).

I don't found reason anywhere:

   - it is not in cisco ips release notes

   - it is not on intellishield site

   - it is not on security center

Regards

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: