11-07-2007 01:21 PM - edited 03-10-2019 03:51 AM
Anyone having a problem with the automaticaly IPS signature update feature in MARS 4.3.1?
I have tried to get them from CCO and I have downloaded the updates to a local server and it stil does not work. As is usual there is not a specific log somewhere that tells you what is missing.
Is there anyway to manually update the IPS signatures from the CLI? For us this has proven to be the only way to update the MARS appliance.
11-07-2007 02:48 PM
Have you tried getting a trace? Do you need to configure a proxy for outbound HTTP?
11-28-2007 09:43 PM
Check and make sure DNS is configured in MARS. I've seen this be the problem several times.
11-29-2007 12:10 PM
Hi Gary,
Thanks for dropping by this forum. I have your book, "Security Monitoring with Cisco Security MARS" and couldn't imagine doing an implementation for a customer without it nearby.
I've got a few Product Enhancement Requests which my customers have passed along to me. I'll combine them in a separate post under the General Security section.
Cheers!
Paul
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide