topic Hi, in Network Security

Firesight rule update

filterfilter — Tue, 12 Mar 2019 12:52:42 GMT

Hi,

I have a question regarding rules update, from what i read in the manual, rule update will provide new/modified some base rules and settings.

is it possible to revert back to old rule update in case the new update have some impact to current network/app? or is there a way to track the changes they made on the base rules

Thanks

Hi,

Dinesh Verma — Fri, 22 Jan 2016 15:17:43 GMT

Hi,

I'm not sure if rollback to older rule update is possible but sure you can see what are the modified rules & new rules added in new-released-rule-update.

Go to Cisco website where rule updates are present & hove mouse over particular rule update. it pops up a little window which has hyperlink for Modified Rules & New Rules.

For eg, go to this URL -> All release -> Rule update & hove mouse over a rule update.

https://software.cisco.com/download/release.html?mdfid=286259687&softwareid=286271056&release=SEU&relind=AVAILABLE&rellifecycle=&reltype=latest

Take a look to the snapshot attached for clarification. Hope this helps.

Regards,

Dinesh Verma

You can track the rule update

Sunil Kumar — Sun, 24 Jan 2016 10:42:48 GMT

You can track the rule update from the IPS policy which new/modified rules have been merged into the IPS policy and what is current status (Generate Events/ Drop & Generate Events/ Disable) of those rule.

If New/Modified Rule are creating any issue in your network then you can disable those rule from here. Please have a look on image to get more info -

Regards,

Sunil Kumar

Rate if this helps !!

Hi Sunil,

filterfilter — Mon, 25 Jan 2016 02:24:52 GMT

Hi Sunil,

Thanks for your input, do you know if there is a way to export this rule update to csv?

the only options i saw is to genereate a report (PDF) for the whole intrusion policy.

Hi Dinesh,

filterfilter — Mon, 25 Jan 2016 02:25:25 GMT

Hi Dinesh,

Thanks , this definitely a help

Did it help reverting back?

Nadeem Jan — Tue, 07 Nov 2017 16:16:26 GMT

please confirm if it help u reverting back to previous build of rules pack?

Re: Firesight rule update

jeruizru — Mon, 10 Sep 2018 16:41:32 GMT

Hi Everyone,

Does anyone know in what format I need to upload new rules?

Kind Regards.