ASA IPS Signature Upate URL

[avilt]

I would like to update the ASA IPS signatures thru proxy. What are the destnation URL's I need to allow in my proxy?

[Marvin Rhoads · Accepted solution]

I believe www.cisco.com and dl.cisco.com should cover it. The first has the metadata and the second is the source of the actual signature files.

Those are the two sites whose certificates you must accept in Cisco Security Manager when setting it up for IPS signature updates.