IPS/IDS 4260 Signatures

[onslaught99]

Hello,

I wanted to get some clarification on the supported signatures for the 4260. I understand that the 4260 is no longer supported and to upgrade to the ASA55xx-x with IPS/IDS module. We are planning to upgrade sometime this year but our customer, in the mean time, wanted to know if we can enhance the security posture of the 4260's until the upgrade happens. According to the following link 7.1(11) is supported for new signatures but the 4260 is not:

https://www.cisco.com/c/dam/en_us/about/security/ips/eos-faq-ips-signature-service.pdf

If we upgrade our 4260 to 7.1(11) can we ingest the newer signatures or are the signatures device based and not IOS based? I just want to make sure I understand it correctly so that I can pass along the correct information.

Thanks

[Marvin Rhoads]

All signatures on all classic Cisco IPS end of sales platforms will be discontinued when those platforms reach end of life next month (April 2018).

That aside, the signatures' compatibility is with the IPS software version - not the hardware it runs on.