CSM - Device update capabilities

Unanswered Question
Jul 1st, 2010
User Badges:

Hello,


Most of my question is already answered but I have to be sure about the capability of the CSM (and the Auto Update Server) about the update of my "Security Devices" (ASA 5500, AIP-SSM, IPS 4200).

(I am talking about the CSM 3.3.1 and 4.0)


With the CSM can I remotely on a large infrastructure update:

- the ASA software : I think yes. What about 2 ASA in active/passive mode?

- the AIP-SSM software?

- the AIP-SSM recovery partition?

- the IPS 4200 software?

- the IPS 4200 recovery partition?

- the IPS signature update file: yes


If one this updates cannot be done by the CSM, it means that I have to do it device by device?


If my CSM server is offline, can I manually download the IPS sig updates and put them on the CSM?


During the software update on these devices, is the configuration saved ?


Thanks in advance!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jacques_henry696 Thu, 07/08/2010 - 00:10
User Badges:

Thanks for the answer!


Ok, but can AUS also take care of the IPS 4260 and AIP-SSM?


Is RME fully integrated into the CSM or is it an external application?


Thanks

Scott Fringer Thu, 07/08/2010 - 07:22
User Badges:
  • Cisco Employee,

CSM will directly handle auto-updating of IPS sensors; AUS is not used.  You simply need to configure the IPS updates in the Security Adminsiration; within the CSM client:


Tools>Security Manager Adminsitration...


Choose "IPS Updates"


Configure the Auto Update Settings in the left-hand pane as required for your environment.


RME is no longer a required component of CSM and is a separate application.


Scott

jacques_henry696 Thu, 07/08/2010 - 09:13
User Badges:

All right, so to sum up, I can do all the tasks in my first post (the 6 points) with the CSM (without RME), yes?


Thanks!

Scott Fringer Thu, 07/08/2010 - 10:02
User Badges:
  • Cisco Employee,

Yes, you should be able to accommodate ASA and IPS software management without the need to install RME; AUS for ASA image management and CSM for IPS software management.


Scott

Actions

This Discussion