cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
517
Views
0
Helpful
2
Replies

process to retiring signatures

jan.odzgan
Level 1
Level 1

Hello.

Can I find reason for retiring signatures in signatures update ?

I mean information like this:

XXXX/0 - "IE buffer overflow" - retired due to time (vulnerability was published 5 years ago)

XXXY/0 - "Firefox buffer overflow" - retired due to many false positive (non-specific regular expression)

XXXZ/0 - "RPC ..." - retired due to performance reason (memory exhaustion)

When I download information about current signatures update, I can't see why signatures were retired.

Thanks

2 Replies 2

PWCSinfosec
Level 1
Level 1

I have actually been looking for this type of informtion, where are you even finding the info?

Hi

It will be good if cisco technics will be add reason of retiring signatures to release notes and to signature desciption in security center (and intellishield too).

I don't found reason anywhere:

   - it is not in cisco ips release notes

   - it is not on intellishield site

   - it is not on security center

Regards

Review Cisco Networking products for a $25 gift card