×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

IPS SCADA signatures

Unanswered Question
Nov 27th, 2013
User Badges:

I have a Cisco CGR 2010 router running CGR2010-UNIVERSALK9-M, Version 15.2(3)T. I have been unable to locate the SCADA signatures mentioned here: http://www.cisco.com/en/US/prod/collateral/routers/ps10967/ps10977/whitepaper_c11-696141.pdf


When I load the latest signatures (Release S752) onto the router, I only see these categories:

  adware/spyware         Adware/Spyware (more sub-categories)

  all                    All Categories

  attack                 Attack (more sub-categories)

  ddos                   DDoS (more sub-categories)

  dos                    DoS (more sub-categories)

  email                  Email (more sub-categories)

  instant_messaging      Instant Messaging (more sub-categories)

  ios_ips                IOS IPS (more sub-categories)

  l2/l3/l4_protocol      L2/L3/L4 Protocol (more sub-categories)

  network_services       Network Services (more sub-categories)

  os                     OS (more sub-categories)

  other_services         Other Services (more sub-categories)

  p2p                    P2P (more sub-categories)

  reconnaissance         Reconnaissance (more sub-categories)

  viruses/worms/trojans  Viruses/Worms/Trojans (more sub-categories)

  web_server             Web Server (more sub-categories)


Where do the SCADA signatures live?


Thank you in advance!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
Loading.
pradnaga Fri, 12/06/2013 - 14:41
User Badges:
  • Cisco Employee,

Hello Stephen


I am looking in to this.I will update you soon.


Regards

Pradeep



pradnaga Tue, 12/10/2013 - 13:50
User Badges:
  • Cisco Employee,

Hello Stephen


You seem to using a old version of IOS-IPS. Can you update IOS-IPS to the latest version like 152-3.T.

We were able to see SCADA category in version 152-3.T.


Regards

Pradeep

Ravi Singh Fri, 02/07/2014 - 14:16
User Badges:
  • Cisco Employee,

I do agree with Pradeep Naqaraja you have to update you IOS-IPS version.

Actions

This Discussion

Related Content