Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

New Goner.A worm signatures

I have updated two of our sensors with the goner.a custom signatures, but now the custom filters on these sensors have disappeared.

I have to regress the sensors to a previous IDS configuration to get the filters back, but that configuration hasn't got the Goner.A signatures. Typical!

Have I done something wrong?

1 REPLY
Cisco Employee

Re: New Goner.A worm signatures

I believe you have found a bug in the interoperability of the Unix Director with SigWizMenu.

We just found out about it this afternoon, and we haven't had a chance to notify everyone about it yet.

If you are creating filters with the Unix Director and then run SigWizMenu, the filters will be removed.

Workaround:

To prevent this from happening, do not use SigWizMenu. Instead nrConfigure on the Unix Director should be used to create the Custom Signatures. nrConfigure has all the functionality available in the SigWizMenu program so you should use nrConfigure instead of SigWizMenu to keep from seeing this problem.

104
Views
0
Helpful
1
Replies
CreatePlease login to create content