topic Re: Problem updating IDS Signature, Urgent!!! in Network Security

Problem updating IDS Signature, Urgent!!!

kaysonaike — Sun, 10 Mar 2019 09:20:59 GMT

I have an IDS4215, i have tried to update the signature through FTP and through IDS MC without success. I need a proceedure on how to achieve this both ways!!

Re: Problem updating IDS Signature, Urgent!!!

sachinraja — Tue, 22 Mar 2005 09:24:49 GMT

hello,

you can use ftp through the foll procedure:

1. Download the binary file IDS-sig-4.1-4-S151.rpm.pkg

to an ftp, scp, http, or https server on your network from:

http://www.cisco.com/cgi-bin/tablebuild.pl/ids4-sigup

CAUTION: You must preserve the original file name.

2. Log in to the IDS CLI using an account with administrator privileges.

3. Type the following command to enter Configuration mode:

configure terminal

4. Execute the upgrade command by typing the following:

upgrade [URL]/IDS-sig-4.1-4-S151.rpm.pkg

where the [URL] is uniform resource locator pointing to where

the signature update package is located. For example, to retrieve

the update via FTP, type the following:

upgrade ftp://@///IDS-sig-4.1-4-S151.rpm.pkg

The available transport methods are: SCP, FTP, HTTP, or HTTPS

5. Enter the appropriate password when prompted.

6. To complete the upgrade, type yes when prompted.

for IDSMC:

1. Download the S151 MC signature update ZIP file,

IDS-sig-4.1-4-S151.zip to the /MDC/etc/ids/updates

directory on the server where you have installed IDS MC from the

following website:

http://www.cisco.com/cgi-bin/tablebuild.pl/mgmt-ctr-ids

2. Start IDS MC from the CiscoWorks2000 Server desktop.

3 Select Configuration > Updates.

4. In the TOC, select Update Network IDS Signatures.

5. Select a file from the Update File list box and click Next.

6. Select the sensor(s) you want to update and click Next.

7. Click Finish.

Re: Problem updating IDS Signature, Urgent!!!

sachinraja — Tue, 22 Mar 2005 09:26:34 GMT

hello,

you can use ftp through the foll procedure:

1. Download the binary file IDS-sig-4.1-4-S151.rpm.pkg

to an ftp, scp, http, or https server on your network from:

http://www.cisco.com/cgi-bin/tablebuild.pl/ids4-sigup

CAUTION: You must preserve the original file name.

2. Log in to the IDS CLI using an account with administrator privileges.

3. Type the following command to enter Configuration mode:

configure terminal

4. Execute the upgrade command by typing the following:

upgrade [URL]/IDS-sig-4.1-4-S151.rpm.pkg

where the [URL] is uniform resource locator pointing to where

the signature update package is located. For example, to retrieve

the update via FTP, type the following:

upgrade ftp://@///IDS-sig-4.1-4-S151.rpm.pkg

The available transport methods are: SCP, FTP, HTTP, or HTTPS

5. Enter the appropriate password when prompted.

6. To complete the upgrade, type yes when prompted.

for IDSMC:

1. Download the S151 MC signature update ZIP file,

IDS-sig-4.1-4-S151.zip to the /MDC/etc/ids/updates

directory on the server where you have installed IDS MC from the

following website:

http://www.cisco.com/cgi-bin/tablebuild.pl/mgmt-ctr-ids

2. Start IDS MC from the CiscoWorks2000 Server desktop.

3 Select Configuration > Updates.

4. In the TOC, select Update Network IDS Signatures.

5. Select a file from the Update File list box and click Next.

6. Select the sensor(s) you want to update and click Next.

7. Click Finish.

Re: Problem updating IDS Signature, Urgent!!!

kaysonaike — Tue, 22 Mar 2005 10:44:24 GMT

Hi sachinraja

Thank you for the information, I have carried out what you suggested on both IDS and I am getting the same out put as below but when I try to upgrade the IDS sensors using the IDSMC, It looks as if it is upgrading but it is not. The process is just going in a circle

Re: Problem updating IDS Signature, Urgent!!!

randy.manning — Tue, 22 Mar 2005 14:02:58 GMT

These procedures should work. I too am having difficulty with upgrading from S148 to S151 or S152. The updated signatures are not showing in the config. This happend before, going from S129 to S131, but S132 'fixed' it. Not sure why S148 to S151, then S152 is not working?

IDS# sh conf | inc 3529

IDS#

Re: Problem updating IDS Signature, Urgent!!!

a.philebosie — Thu, 24 Mar 2005 11:58:32 GMT

Hello Sachinraja,

Do I need a license for my IDS (IDS 4215) before I can upgrade the signatures.

Re: Problem updating IDS Signature, Urgent!!!

milan.kulik — Thu, 24 Mar 2005 13:09:10 GMT

I'm in the same trouble upgrading fro S150 to S152.

I'm using the autoupdate.

I can see in my FTP server log that the S152 .pkg file has been successfully downloaded to the IDS device, but sh ver is still showing the old ver 150.

Anybody knows what's the problem?

Regards,

Milan