cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1513
Views
0
Helpful
1
Replies

Need to update IPS Sensor and Signature

I have configured auto update on Cisco IPS 4240 but update is not happening.

Output of the command "Show statistics host" is given below

Auto Update Statistics

   lastDirectoryReadAttempt = 03:00:00 GMT+05:30 Sun Nov 24 2013

    =   Read directory:

https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl


    =   Error: AutoUpdate exception: HTTP connection failed [1,111]

   lastDownloadAttempt = N/A

   lastInstallAttempt = N/A

   nextAttempt = 03:00:00 GMT+05:30 Mon Nov 25 2013

Auxilliary Processors Installed

Current running version on IPS 4240

Cisco Intrusion Prevention System, Version 6.1(1)E1

Host:

    Realm Keys          key1.0

Signature Definition:

    Signature Update    S338.0                   2008-06-10

    Virus Update        V1.2                     2005-11-24

OS Version:             2.4.30-IDS-smp-bigphys

Platform:               IPS-4240-K9

Kindly help me in getting the IPS engine and signature updated to the latest version.

1 Reply 1

rhermes
Level 7
Level 7

In IPS 7.0(8)E4 the default value of the Cisco server IP address has been changed from 198.133.219.25 to 72.163.4.161 in the Auto Update URL configuration.

Manually update your sensor to the latest OS (update your firewall rules to allow this address) and your autoupdates should work.

Reference: http://www.cisco.com/en/US/docs/security/ips/7.0/configuration/guide/cli/cli_system_images.html#wp1081874

- Bob

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card