Solved: Question about IPS signature updates.

skytosky · ‎09-25-2005

I've installed ASA5510(with AIP10) on our client's site. But I can't know how to update IPS signature. Is automatic update possible? i.e. through cco id.

Our client doesn't have IDS MC. What should we do? Let me know above, plz.

jamesand · ‎09-26-2005

Without MC there is no auto update directly from CCO. However, you can setup a local server (SSH or FTP) and copy signature update packages to this server from CCO. Next, you can either run a manual upgrade from IDM (https://1.2.3.4) or from the CLI (session into the ASA SSM card) or setup an auto upgrade schedule that will periodically upgrade the sensor from the local server. To setup auto upgrades, IDM would be the easiest to use. If you want to do a manual upgrade here is an example for CLI:

# session 1

# conf t

# ssh host 1.2.3.4

# upgrade scp://user@1.2.3.4//home/user/upgrades/ IPS-sig-S192-minreq-5.0-1.pkg

View solution in original post

jamesand · ‎09-26-2005

Without MC there is no auto update directly from CCO. However, you can setup a local server (SSH or FTP) and copy signature update packages to this server from CCO. Next, you can either run a manual upgrade from IDM (https://1.2.3.4) or from the CLI (session into the ASA SSM card) or setup an auto upgrade schedule that will periodically upgrade the sensor from the local server. To setup auto upgrades, IDM would be the easiest to use. If you want to do a manual upgrade here is an example for CLI:

# session 1

# conf t

# ssh host 1.2.3.4

# upgrade scp://user@1.2.3.4//home/user/upgrades/ IPS-sig-S192-minreq-5.0-1.pkg