NSDB Updates

electoralreform · ‎11-17-2005

Hi,

I'm constantly updating my IDS Sensor but what I've started noticing is that within the IDS Event Viewer 4.1(1) the NSDB link is not being found when looking at definitions of attempted intrusions. This has not moved and I'm sure it's because the new signatures being released don't have definitions in the original database that was installed.

Bottom line: Is there somewhere to download a complete updated NSDB?

Thanks in advance.

Damian

scothrel · ‎11-17-2005

Damian,

This is a known problem. Around S194 or so we switched to shipping a 5.x based NSDB. Some 4.x signatures are no longer present in the 5.x product because they were handled differently, so it is possible that you can look up a 4.x signature in IEV and it not be present. We are in the process of completely redesigning the NSDB to allow you to customize your display for 4.1, 5.0, 5.1 etc.... I'm not sure how or if we are going to handle the 4.1 signatures that did not get carried forward, as they no longer exist in the database. I will take the issue to the design team.