topic That sounds good The reason I in Network Security

SourceFire IPS updates

Colin Higgins — Sun, 10 Mar 2019 13:22:01 GMT

We are in the process of putting in new firewalls with SFP IPS modules in them that will be managed by a SourceFire security center appliance (a 1500 series)

I know with the old IPS systems, the modules would get their signature updates directly. Will they now get their signature and software updates from the management server? (this would make things a lot easier)

Hello Colin Yes, your

pazzi — Sun, 26 Apr 2015 14:55:49 GMT

Hello Colin

Yes, your Firesight management center gets all the rules updates and the Intrusion policies get updated and redeployed to your sensors.

Hth

Paul

That sounds good The reason I

Colin Higgins — Sun, 26 Apr 2015 15:07:06 GMT

That sounds good

The reason I ask, is that some of the firewalls are edge devices providing outbound Internet access. I don't want to hairpin traffic off an internal router so that the IPS module can go fetch updates from Cisco.

I would much rather keep that management IP for the sensor isolated and have the server push updates to it.