topic IOS IPS auto-update without CSM in Network Security https://community.cisco.com/t5/network-security/ios-ips-auto-update-without-csm/m-p/1359657#M67802 <P>Hi,</P><P></P><P>We have 400 x 1811 router on which we need to update the IPS signature definition and custom signature.</P><P></P><P>What is the best way to do it withou running CSM ?</P><P></P><P>According to Cisco documentation, we need to add the auto-update command with an .XML extention. But when we load a .pkg in a router, the output is 4 different files. Unfortunalty we can auto-update only one file. Which one to I need to load on our TFTP server ?</P><P></P><P>All the exemples of Cisco are using one single XML file.</P><P></P><P>Does a single file with the signature defenition, category, default and type exist ?</P><P></P><P>Since all our router have the same IPS config, I tought I could use one router at the central office with the configuration we want. And by someway asking the remote routers to auto-update their XML file on that router on which I would have activated a TFTP server.</P><P></P><P>Anyone ever had to upgrade a lot of router IOS IPS signature?</P> Sun, 10 Mar 2019 11:55:51 GMT nicolas.bedard 2019-03-10T11:55:51Z IOS IPS auto-update without CSM https://community.cisco.com/t5/network-security/ios-ips-auto-update-without-csm/m-p/1359657#M67802 <P>Hi,</P><P></P><P>We have 400 x 1811 router on which we need to update the IPS signature definition and custom signature.</P><P></P><P>What is the best way to do it withou running CSM ?</P><P></P><P>According to Cisco documentation, we need to add the auto-update command with an .XML extention. But when we load a .pkg in a router, the output is 4 different files. Unfortunalty we can auto-update only one file. Which one to I need to load on our TFTP server ?</P><P></P><P>All the exemples of Cisco are using one single XML file.</P><P></P><P>Does a single file with the signature defenition, category, default and type exist ?</P><P></P><P>Since all our router have the same IPS config, I tought I could use one router at the central office with the configuration we want. And by someway asking the remote routers to auto-update their XML file on that router on which I would have activated a TFTP server.</P><P></P><P>Anyone ever had to upgrade a lot of router IOS IPS signature?</P> Sun, 10 Mar 2019 11:55:51 GMT https://community.cisco.com/t5/network-security/ios-ips-auto-update-without-csm/m-p/1359657#M67802 nicolas.bedard 2019-03-10T11:55:51Z Re: IOS IPS auto-update without CSM https://community.cisco.com/t5/network-security/ios-ips-auto-update-without-csm/m-p/1359658#M67804 <HTML><HEAD></HEAD><BODY><P>This can now be done in the 15.1T branch using cisco.com to download the update directly, see :</P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151TNEWF.html#wp1040750">http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151TNEWF.html#wp1040750</A></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_ips5_sig_fs_ue.html#wp1137583">http://www.cisco.com/en/US/docs/ios/sec_data_plane/configuration/guide/sec_ips5_sig_fs_ue.html#wp1137583</A></P></BODY></HTML> Sat, 30 Oct 2010 03:49:15 GMT https://community.cisco.com/t5/network-security/ios-ips-auto-update-without-csm/m-p/1359658#M67804 Nicolas Meessen 2010-10-30T03:49:15Z