Latest signature update

[Shibu1978]

Dear All,

We would like to update our sensor with the latest signature set. Please find below the current running sensor details.

AIP-SSM# sh configuration

! ------------------------------

! Current configuration last modified Wed Nov 23 16:03:43 2011 ! ------------------------------ ! Version 6.0(6) ! Host:

!     Realm Keys          key1.0

! Signature Definition:

!     Signature Update    S399.0   2009-05-06

!     Virus Update        V1.4     2007-03-02

! ------------------------------

Based on the above information kindly suggest the signature set and other pre -requisites

Thanks in advance

[andrey.dugin]

Give the show version output for better analysis.

[Shibu1978]

AIP-SSM# sh ver
Application Partition:

Cisco Intrusion Prevention System, Version 6.0(6)E3

Host:
    Realm Keys          key1.0
Signature Definition:
    Signature Update    S399.0                   2009-05-06
    Virus Update        V1.4                     2007-03-02
OS Version:             2.4.30-IDS-smp-bigphys
Platform:               ASA-SSM-20
Serial Number:          JAF1347ARMC
Licensed, expires:      23-Nov-2012 UTC
Sensor up-time is 6 days.
Using 1019588608 out of 2093604864 bytes of available memory (48% usage)
application-data is using 41.6M out of 166.8M bytes of available disk space (26%                                                                                                  usage)
boot is using 37.6M out of 68.6M bytes of available disk space (58% usage)

MainApp          N-NUBRA_2009_JUL_15_01_10_6_0_5_57   (Ipsbuild)   2009-07-15T01                                                                                                 :15:08-0500   Running
AnalysisEngine   N-NUBRA_2009_JUL_15_01_10_6_0_5_57   (Ipsbuild)   2009-07-15T01                                                                                                 :15:08-0500   Running
CLI              N-NUBRA_2009_JUL_15_01_10_6_0_5_57   (Ipsbuild)   2009-07-15T01                                                                                                 :15:08-0500

Upgrade History:

  IPS-K9-6.0-6-E3   13:48:06 UTC Wed Jul 15 2009

Recovery Partition Version 1.1 - 6.0(6)E3

AIP-SSM#

Please find above the details

Thanks

Shibu

[Julio Carvajal · Accepted solution]

Hello Shibu,

Here is the one you are looking for:

IPS-sig-S479-req-E3.pkg

Release Date: 24/MAR/2010

E3 Signature Update S479

Size: 419.93 KB (430007 bytes)

Please rate helpful posts,

Regards.

Julio

[Shibu1978]

Hi Julio,

Could you please send me the procedures to update the signatures to sensor. also E3 to E4 engine upgrade porcedures as well.

[andrey.dugin]

You may read this detailed guide for IPS upgrade:

http://www.cisco.com/en/US/docs/security/ips/5.0/configuration/guide/cli/cliimage.html#wp1064238

Upgrade procedure is the same as for engine and signatures but signature update may take more time and engine upgrade may require sensor reboot.