Cisco IDS Active Update: Cisco IDS 3.0(2)S9 signature update

[mhossain]

The Cisco IDS 3.0(2)S9 signature update is now available for CCO download at the URLs listed below.

Installation instructions are provided in the IDSk9-sp-3.0-2-S9.readme file. This signature update will only install on sensors running 3.0 sensor software.

Customers running 2.2.1.x software on their sensors will have to upgrade to the to 3.0 sensor software in order to install this and future signature updates. Note that the 3.0 upgrade from 2.2.1.x requires a CD-ROM which can be requested for free for customers with sensor SMARTnet maintenance contracts at: http://www.cisco.com/upgrade/

Customers running 2.5 software on their sensors may upgrade to 3.0 by a simple CCO download of the base software for 3.0. This is available at the following CCO site: http://www.cisco.com/cgi-bin/tablebuild.pl/ids30-appsens

The 3.0 software will only run on Cisco manufactured sensors. Customers running legacy WheelGroup appliances or software-only need to refer to the Product Bulletin at: http://www.cisco.com/warp/public/cc/pd/sqsw/sqidsz/prodlit/1077_pp.htm

The 3.0(2)S9 Sensor Signature Update is available for download at: http://www.cisco.com/cgi-bin/tablebuild.pl/ids30-appsens-updt

PLEASE NOTE THAT THE MINIMUM VERSION OF THE MANAGEMENT CONSOLE THAT WILL BE REQUIRED TO SUPPORT THE 3.0 SENSOR IS CSPM 2.3.2i or UNIX DIRECTOR 2.2.3.

ALSO, PLEASE APPLY THE S(9) SIGNATURE UPDATE TO CSPM 2.3.2i PRIOR TO ATTEMPTING TO SUPPORT THE 3.0(2)S9 SENSOR

The latest versions of the CSPM (including the s(9) update for CSPM 2.3.2i) & the Unix Director are available for download at:

http://www.cisco.com/cgi-bin/tablebuild.pl/cspm (CSPM)

http://www.cisco.com/cgi-bin/tablebuild.pl/ids221-dir-update (Unix Director)

[ishah]

Hi,

Thanks for that, however the Intrusion Detection Module for the Catalyst 6K has not had an update for months now.

V3.0 was due to ship in August but then got pulled till October - any news as we have deployed units that are drastically out of date in terms of signatures etc.

thanks for any info

Inti

[rwassom]

IDSM 3.0 should be available on CCO now.

[ishah]

Hi,

I have upgraded a Sensor to 3.0 by doing the following:

ids-installer

apply servicepack to 3.02 S4

apply signature update to 3.02 S6

Everything worked fine until I did the signature update. I get the following message:

Specified IDS Sensor version 3.0(2) IDSM is not an exact match to a supported version. All features may not be supported

I saw this in earlier versions of CSPM - The CSPM is 2.32i with latest S9 updates. Why am I seeing this message.

I assume I should remove and re-add the sensor but losing filters is a pain.

Any comments ?

thanks

Inti

[marcabal]

From the S9 update reademe for CSPM:

-----------------------------------------------------------------

CAVEATS

After installing the S9 signature update, you may see the following warning

message while trying to add a sensor that has been updated to 3.0(2)S9.

"Specified IDS Sensor Version 3.0(2)S9 is not an exact match to a supported

version. All features may not be supported."

This warning message can safely be ignored. CSPM will function properly

with a 3.0(2)S9 sensor.

-----------------------------------------------------------------

This caveat applies to both the appliance 3.0(2)S9 or higher and IDSM 3.0(2)S6 or higher.

Just ensure that you have the proper version selected for the sensor, and then you should be able to safely ignore the warning.