topic How to run signatures update for IOS IPS from xxxxx.pkg file? in Network Security

How to run signatures update for IOS IPS from xxxxx.pkg file?

zheka_pefti — Sun, 10 Mar 2019 11:29:05 GMT

Hi folks,

<br />I got curious after enabling and loading IPS signatures into our routers. I used the latest IOS-S376-CLI.pkg file to load basic signatures set. Now then I have signature definitions files in the routers flash in xml format.

<br />How about auto updates? Cisco's user guide says that I can download them from the server via rcp/tftp/ftp and they should be xml files. Where will I get the latest xml files? Should I load the latest pkg file into the router again, compile the signatures and then pre-position them for all other 80 routers to pull them from the central location? As far as I understand Cisco publishes them in pkg format. Am I missing something? Advise please!!!

Re: How to run signatures update for IOS IPS from xxxxx.pkg file

jvalin__s — Wed, 04 Feb 2009 10:49:03 GMT

hi zheka,

well I have updated the latest 377pkg file through the manual update.

before updating the signature you need to have latest version of ENGINE.

for 376 or 377 you will require E3 engine. If you IPS has E1 engine then step by step u need to update the engine to E2 and then to E3. the engine update files are available on the smartnet login if u have.

Thanks & Regards

Jvalin

Re: How to run signatures update for IOS IPS from xxxxx.pkg file

zheka_pefti — Wed, 04 Feb 2009 16:57:11 GMT

Engine? Never heard of it. Sorry for being negligent. Can you please provide a link to engine upgrade?

Re: How to run signatures update for IOS IPS from xxxxx.pkg file

jvalin__s — Thu, 05 Feb 2009 07:30:25 GMT

well I am sorry I thought you are trying to upgrade it on the sensor, please tell me the router series on which you are trying to upgrade the IPS signatures.

Re: How to run signatures update for IOS IPS from xxxxx.pkg file

zheka_pefti — Thu, 05 Feb 2009 07:49:47 GMT

I figured you mixed it up with the sensor 🙂

No problem, we've got about 80 871W routers at the customer's remote stores and routers run one of the latest IOS releases, c870-advipservicesk9-mz.124-22.T

Thanks in advanced