Upgrading sensor signatures through CSPM

[miqbalb]

We are running CSPM version 2.3.3i. After upgrading the signature version to S11 on the CSPM. Is it possible to push the same S11 signatures from CSPM to all the sensors as well or we have to go to individual sensors and upgrade their signature manually.

Thanks

[senthil]

Hi

The CSPM signature update only applies to CSPM host's NSDB htmls & signature template files.

The signature template files are backward compatible too.

The Wizards->Update Sensor option is only for showing up the updated sensor versions in CSPM

topology and to apply the updated signature templates.

U hv the sensor signature updates whichz a binary file for updating the netranger package in each

sensor. This cannot be pushed from CSPM.

[chstone]

This is correct, in that the Signature update Wizard

will only update the CSPM server and not your sensors. However, if you have multiple sensor, then

you may want to consider using the "idsupdate utility". With this utility you can store the sensor

updates on one ftp server(or a sensor) and then configure each sensor to automatically go to that ftp

site and download the signature update. This would save you from having to ftp the updates manually to each sensor.

Chris

Check out this url:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/csids/csids6/12216_02.htm