IOS IPS auto-update

m.renshaw — Sun, 10 Mar 2019 12:32:56 GMT

Hi,

I have a couple of questions I hope people could answer:

1) What recommendations/options are available for downloading signature files to a HTTP/TFTP server prior to having the IOS IPS device pull them from the server? Is their a way to automate the HTTP/TFTP server downloading the signatures? (Cron job or such)

2) Does the signature file name change each time a new signature file is released? If it does, would I have to go back to the router to update the URL string that is configured in the ip ips auto-update section? I would hate to have to update 200 CPE devices each time a new signature file is released.

Hoping someone could answer these or help point me in the right direction to find the answer out.

regards M

IOS IPS auto-update

m.renshaw — Tue, 29 Nov 2011 10:33:39 GMT

I found this link with answers my one question.

Cisco IOS Intrusion Prevention System (IPS)

Tuning, Deploying and Updating Cisco IOS IPS Signature Sets For Multiple-Device Deployments

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6634/white_paper_c11_549300.html

topic IOS IPS auto-update in Network Security

IOS IPS auto-update

IOS IPS auto-update

Cisco IOS Intrusion Prevention System (IPS)

Tuning, Deploying and Updating Cisco IOS IPS Signature Sets For Multiple-Device Deployments