3.1-3-S39 cumulative?

[pbobby]

The descriptions for sensor updates 3.1-3-S37, 3.1-3-S38 and 3.1-3-S39 all indicate that their prerequisite is to have sensors at 3.1-3.S31.

If that is the case, why the difference in file size for 3.1-3-S39 compared to the other two?

[ball]

Yes, its cumulative.

I noticed the same thing with the file size. I was running S35. I downloaded and installed the S39. While doing that, I checked the readme files for S37 and S38 for what new signatures were included. After the upgrade from S35 to S39, I checked the signatures on the sensors. They had all of the S37/S38 update signatures.

Erik

[marcabal · Accepted solution]

S39 does not have the NSDB update for IDM, or the S39 IEV update.

This was to reduce the time to get S39 delivered.

If you are using the NSDB on IDM or are using IEV, then you would need to:

1) uninstall S39

2) install S38 to get the S38 NSDB and S38 IEV update

3) Re-install S39

S39 does contain the S32, S33, S34, S35, S36, S37, S38, and S39 signatures for the sensor itself (just not the NSDB or IEV update).

If you are using CSPM, Unix Director, or IDS MC/ Sec Mon then you don't need to worry about the NSDB and IEV updates not being there. Since you will be using the NSDB on your other management box, and you aren't using IEV.

The S40 NSDB, and S40 IEV update will be in the S40 Signature Update for the sensor.