Re: new engineering release 3.1.3 for service-over-host sweeps
The sigs.xml.313eng.s24 file is not a replacement "Sig Update" file. It is the engine parameter and signature default descriptions for the Director platform.
This file is not needed to make the new 3.1.3 sensor function properly. The only need for the file is if you want to use the "PortOfInterest" parameter for the Engine SWEEP.HOST.TCP. This parameter is not needed because of the new functionality of the engine. It is there for special applications where you want to create a port XYZ custom host sweep signature. The default behavior of the engine now gives you good coverage for port ANY host sweeps so you probally won't need the PortOfInterest parameter.
We included the .xml file with the bundle so we would have the file ready if needed. I should have explicitly stated in the instructions to ignore this file.
When there is a customer need for the above mentioned capability, we will publish offical "install" instructions for this .xml file.
Sorry for this tardy response, I was out of the office for a couple days.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...