Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

signature path updates?

If a sensors is at version of 3.1(4) S52 and the signature up of 3.1(4) S54 is used immediately without first applying 3.1(4) S53, will the patch/signature tuning that is included in 3.1(4) S53 for "Samba call_trans2open Overflow" be applied

TUNED SIGNATURES / RESOLVED CAVEATS

- 3325 Samba call_trans2open Overflow

Refer to DDTS CSCec34170

2 REPLIES

Re: signature path updates?

Yes, sig updates are cumulative. Meaning, the S54 update will have all of the sigs added in S53. The only time you need to step through a systematic upgrade is when adding new service packs (the number inside the () changes). Service pack updates are not cumulative per se. You can usually tell this by looking at the file size for the updates. The service pack updates are going to be substantially bigger than the sig updates. Hope this helps.

Scott

Bronze

Re: signature path updates?

Just to amplify a bit, if you were building a new sensor today, you would need to do the following to be up-to-date:

1) Restore CD puts the sensor to 3.1(3)S37;

2) Patch file IDSk9-sp-3.1-4-S50.bin puts the sensor to 3.1(4)S50; and,

3) Patch file IDS-sig-3.4-4-S54.bin puts the sensor to 3.1(4)S54 (latest and greatest for 3.1).

Alex Arndt

84
Views
0
Helpful
2
Replies
CreatePlease to create content