topic Re: IDSM-2(6.X) Update with CSM 3.2 in Network Security

IDSM-2(6.X) Update with CSM 3.2

blackhat2020 — Sun, 10 Mar 2019 11:29:25 GMT

Hi,I have some questions about updating my sensor with CSM 3.2

1-can i use my csm server as a ftp server to put updates such as signature update or image update and then configure the module to poll the updates from there?

2-is there some how automatic procedures to configure on idsm-2 and csm to force the module to get signature updates from CSM server?(assume that i get all sig updates from cisco site with my cco account manually not with CSM itself and then i put theme on CSM server)

Thanks

Re: IDSM-2(6.X) Update with CSM 3.2

rhermes — Mon, 09 Feb 2009 22:21:54 GMT

1. CSM does not act as a passive file server. It will https into your sensor and transfer a system or signature update, but this is a CSM push, not a sensor pull of the file.

2. You can automate the IPS updates deployed by CSM, but it might require CSM to pull the updates from CCO so it knows it HAS a new update to deploy.

http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.1/user/guide/defapset.html#wpxref37046