11-27-2013 01:00 PM - edited 03-10-2019 06:06 AM
I have a Cisco CGR 2010 router running CGR2010-UNIVERSALK9-M, Version 15.2(3)T. I have been unable to locate the SCADA signatures mentioned here: http://www.cisco.com/en/US/prod/collateral/routers/ps10967/ps10977/whitepaper_c11-696141.pdf
When I load the latest signatures (Release S752) onto the router, I only see these categories:
adware/spyware Adware/Spyware (more sub-categories)
all All Categories
attack Attack (more sub-categories)
ddos DDoS (more sub-categories)
dos DoS (more sub-categories)
email Email (more sub-categories)
instant_messaging Instant Messaging (more sub-categories)
ios_ips IOS IPS (more sub-categories)
l2/l3/l4_protocol L2/L3/L4 Protocol (more sub-categories)
network_services Network Services (more sub-categories)
os OS (more sub-categories)
other_services Other Services (more sub-categories)
p2p P2P (more sub-categories)
reconnaissance Reconnaissance (more sub-categories)
viruses/worms/trojans Viruses/Worms/Trojans (more sub-categories)
web_server Web Server (more sub-categories)
Where do the SCADA signatures live?
Thank you in advance!
12-06-2013 02:41 PM
Hello Stephen
I am looking in to this.I will update you soon.
Regards
Pradeep
12-10-2013 01:50 PM
Hello Stephen
You seem to using a old version of IOS-IPS. Can you update IOS-IPS to the latest version like 152-3.T.
We were able to see SCADA category in version 152-3.T.
Regards
Pradeep
02-07-2014 02:16 PM
I do agree with Pradeep Naqaraja you have to update you IOS-IPS version.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide