IPS upgrade the virus feature library

[jack lee]

hi all， our ASA5545 Version 9.1(2), I want to know if the IPS of ASA is supported to upgrade the virus feature library？ Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 300 perpetual Inside Hosts : Unlimited perpetual Failover : Active/Active perpetual Encryption-DES : Enabled perpetual Encryption-3DES-AES : Enabled perpetual Security Contexts : 2 perpetual GTP/GPRS : Disabled perpetual AnyConnect Premium Peers : 2 perpetual AnyConnect Essentials : Disabled perpetual Other VPN Peers : 2500 perpetual Total VPN Peers : 2500 perpetual Shared License : Disabled perpetual AnyConnect for Mobile : Disabled perpetual AnyConnect for Cisco VPN Phone : Disabled perpetual Advanced Endpoint Assessment : Disabled perpetual UC Phone Proxy Sessions : 2 perpetual Total UC Proxy Sessions : 2 perpetual Botnet Traffic Filter : Disabled perpetual Intercompany Media Engine : Disabled perpetual IPS Module : Enabled perpetual Cluster : Disabled perpetual This platform has an ASA5545 VPN Premium license.

[Marvin Rhoads]

What virus feature library are you talking about?

I'm not familiar with any such thing on a Cisco ASA and I've been working with them for a long time. There used to be some Trend Micro integration many years ago but that's been long-discontinued.

[jack lee]

Is it auto update IPS feature?

[Marvin Rhoads]

The ASA classic IPS module is end of life as of this month. If you are asking about IPS signature updates, the last one will be issued on 26 April 2018.

https://www.cisco.com/web/software/282549755/142124/IPS-sig-S1016.readme.txt

The current one (S1016) is available here:

https://software.cisco.com/download/home/286129615/type/282549755/release/S1016

Assuming your IPS module is licensed you can download the current IPS update and apply it directly. Detailed instructions are in the readme I linked above.

[jack lee]

hi Rhoads,

OK,Thank you. I will check it. If I have any question, could I ask you?

[Marvin Rhoads]

You're welcome. Please rate the reply as helpful if it was.

You can continue to use this thread for any follow up question.