Updating IDS signatures via CiscoWorks VMS (IDS MC)

[jodr]

Until now we have been updating the signatures of our 4 appliances and 2 blades in direct sessions to every single sensor. This is because updating the sensors via VMS is not working in our installation. We use nevertheless the procedure as being described in the help pages. Only the signaturs for the IDS MC are updated, but IDS MC is not doing anything with these updates towards our sensors. We are using VMS 2.2 with IDS MC 1.2(3). We follow this procedure : downloading the zip-file to the IDS MC specific directory, selecting this file in the update screen in IDS MC and selecting the devices to which this update has to be applied.

Best regards,

Johan Derycke.

[nikhil_m]

Any update on this? thanks.

[rhermes]

There have been some very helpfull suggestions for this problem in another thread: http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.eea5f1a

If you changed the VMS host IP address, you need to edit a few .xml files. This solved the same problem for me.

[jodr]

Hello,

Yes, our VMS station changed IP address and yes the files mentioned had to be adjusted. So thanks already for these suggestions. However there seem to be still another issue. It's still isn't working. And we try to update manually via https, I even can't pass the adding of a trusted host. The procedure I'm following is :

config t

tls trusted-host ip-address port 443

upgrade

https:///vms/sensorupdate/IDS-sig-4.1-1-S57.rpm.pkg

But on using the tls command it's giving us an error (handshake incomplete).

However there is no firewall in between the sensor and the VMS.

Best regards,

Johan.

[jodr]

Issue solved by applying VMS Update 1.