CSM - Device update capabilities

Unanswered Question
Jul 1st, 2010
User Badges:


Most of my question is already answered but I have to be sure about the capability of the CSM (and the Auto Update Server) about the update of my "Security Devices" (ASA 5500, AIP-SSM, IPS 4200).

(I am talking about the CSM 3.3.1 and 4.0)

With the CSM can I remotely on a large infrastructure update:

- the ASA software : I think yes. What about 2 ASA in active/passive mode?

- the AIP-SSM software?

- the AIP-SSM recovery partition?

- the IPS 4200 software?

- the IPS 4200 recovery partition?

- the IPS signature update file: yes

If one this updates cannot be done by the CSM, it means that I have to do it device by device?

If my CSM server is offline, can I manually download the IPS sig updates and put them on the CSM?

During the software update on these devices, is the configuration saved ?

Thanks in advance!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
jacques_henry696 Thu, 07/08/2010 - 00:10
User Badges:

Thanks for the answer!

Ok, but can AUS also take care of the IPS 4260 and AIP-SSM?

Is RME fully integrated into the CSM or is it an external application?


Scott Fringer Thu, 07/08/2010 - 07:22
User Badges:
  • Cisco Employee,

CSM will directly handle auto-updating of IPS sensors; AUS is not used.  You simply need to configure the IPS updates in the Security Adminsiration; within the CSM client:

Tools>Security Manager Adminsitration...

Choose "IPS Updates"

Configure the Auto Update Settings in the left-hand pane as required for your environment.

RME is no longer a required component of CSM and is a separate application.


jacques_henry696 Thu, 07/08/2010 - 09:13
User Badges:

All right, so to sum up, I can do all the tasks in my first post (the 6 points) with the CSM (without RME), yes?


Scott Fringer Thu, 07/08/2010 - 10:02
User Badges:
  • Cisco Employee,

Yes, you should be able to accommodate ASA and IPS software management without the need to install RME; AUS for ASA image management and CSM for IPS software management.



This Discussion