topic IPS upgrade the virus feature library in Network Security

IPS upgrade the virus feature library

jack lee — Fri, 21 Feb 2020 15:38:05 GMT

hi all， our ASA5545 Version 9.1(2), I want to know if the IPS of ASA is supported to upgrade the virus feature library？ Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 300 perpetual Inside Hosts : Unlimited perpetual Failover : Active/Active perpetual Encryption-DES : Enabled perpetual Encryption-3DES-AES : Enabled perpetual Security Contexts : 2 perpetual GTP/GPRS : Disabled perpetual AnyConnect Premium Peers : 2 perpetual AnyConnect Essentials : Disabled perpetual Other VPN Peers : 2500 perpetual Total VPN Peers : 2500 perpetual Shared License : Disabled perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual UC Phone Proxy Sessions : 2 perpetual Total UC Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Intercompany Media Engine : Disabled perpetual IPS Module : Enabled perpetual Cluster : Disabled perpetual This platform has an ASA5545 VPN Premium license.

Re: IPS upgrade the virus feature library

Marvin Rhoads — Sat, 14 Apr 2018 14:05:07 GMT

What virus feature library are you talking about?

I'm not familiar with any such thing on a Cisco ASA and I've been working with them for a long time. There used to be some Trend Micro integration many years ago but that's been long-discontinued.

Re: IPS upgrade the virus feature library

jack lee — Sun, 15 Apr 2018 13:24:24 GMT

Is it auto update IPS feature?

Re: IPS upgrade the virus feature library

Marvin Rhoads — Sun, 15 Apr 2018 13:45:13 GMT

The ASA classic IPS module is end of life as of this month. If you are asking about IPS signature updates, the last one will be issued on 26 April 2018.

https://www.cisco.com/web/software/282549755/142124/IPS-sig-S1016.readme.txt

The current one (S1016) is available here:

https://software.cisco.com/download/home/286129615/type/282549755/release/S1016

Assuming your IPS module is licensed you can download the current IPS update and apply it directly. Detailed instructions are in the readme I linked above.

Re: IPS upgrade the virus feature library

jack lee — Sun, 15 Apr 2018 13:57:10 GMT

hi Rhoads,

OK,Thank you. I will check it. If I have any question, could I ask you?

Re: IPS upgrade the virus feature library

Marvin Rhoads — Sun, 15 Apr 2018 14:12:47 GMT

You're welcome. Please rate the reply as helpful if it was.

You can continue to use this thread for any follow up question.