IPS SCADA signatures

Stephen Craven — Sun, 10 Mar 2019 13:06:08 GMT

I have a Cisco CGR 2010 router running CGR2010-UNIVERSALK9-M, Version 15.2(3)T. I have been unable to locate the SCADA signatures mentioned here: http://www.cisco.com/en/US/prod/collateral/routers/ps10967/ps10977/whitepaper_c11-696141.pdf

When I load the latest signatures (Release S752) onto the router, I only see these categories:

adware/spyware Adware/Spyware (more sub-categories)

all All Categories

attack Attack (more sub-categories)

ddos DDoS (more sub-categories)

dos DoS (more sub-categories)

email Email (more sub-categories)

instant_messaging Instant Messaging (more sub-categories)

ios_ips IOS IPS (more sub-categories)

l2/l3/l4_protocol L2/L3/L4 Protocol (more sub-categories)

network_services Network Services (more sub-categories)

os OS (more sub-categories)

other_services Other Services (more sub-categories)

p2p P2P (more sub-categories)

reconnaissance Reconnaissance (more sub-categories)

viruses/worms/trojans Viruses/Worms/Trojans (more sub-categories)

web_server Web Server (more sub-categories)

Where do the SCADA signatures live?

Thank you in advance!

pradnaga — Fri, 06 Dec 2013 22:41:25 GMT

Hello Stephen

I am looking in to this.I will update you soon.

Regards

Pradeep

pradnaga — Tue, 10 Dec 2013 21:50:32 GMT

Hello Stephen

You seem to using a old version of IOS-IPS. Can you update IOS-IPS to the latest version like 152-3.T.

We were able to see SCADA category in version 152-3.T.

Regards

Pradeep

Ravi Singh — Fri, 07 Feb 2014 22:16:58 GMT

I do agree with Pradeep Naqaraja you have to update you IOS-IPS version.

topic IPS SCADA signatures in Network Security