cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
363
Views
0
Helpful
3
Replies

Cant get CW sig past s47

tamarix
Level 1
Level 1

Hello

Pardon any lack of knowledge we are new to IDS, we have a CW Server, a 4210, and a 4235. We can get our sensors upgraded to current versions but we cant get the CW server updated past s47.

As we understand it both the sensor and the CW server have to be the same sig version for it all to work. We have been working with tac and have had a lot of problem, we have had to reinstall many times. Currently we are running CW 2.2 MC 1.2.3 and we have installed idsmdc1.2.3-win-CSCsa166823.

When we put the updated sigs on the CW server it appears to take them but in the drop down menu under the "Management Center for IDS Senors" when we try and add the sensors in the version drop down tab at best it only ever shows 4.0(2)s43.

any help anyone could provide is greatly appreciated.

thanks

t-

3 Replies 3

jterry
Level 1
Level 1

There is another IDS MC patch that you will need. Try idsmdc1_2_3-win-CSCee60913 as well.

JT

We updated to 60913, found it odd that it had no details under the about this server area.

post that patch we tried to update the signatures again via monitoring center, security monitor, admin , config, update. Then we add a dummy sensor via management center, ids sensors, devices, sensor, then add a bogus one with ip 1.1.1.1 and when we selected the signature from the drop down it still only shows S43

:\

Try downloading IDS-K9-min-4.1-1-S47.zip , apply it and then download IDS-K9-sp-4.1-4-S91.zip and apply it.

Here's the URL http://www.cisco.com/cgi-bin/tablebuild.pl/mgmt-ctr-ids-ids4updates