CSPM and pushing Signature Updates

[andersok]

Does anyone know if CSPM is capable of pushing updated signature files to the IDS sensors (either the 42xx appliance or IDSM)? In the usual release notes, CSPM has to be updated to recognize the new signatures and then the signature file has to be installed on the sensor as a separate exercise. I thought I read somewhere that CSPM could push these sig updates to the sensor.

Any comments appreciated.....

Kevin Anderson

[kleem]

You can use the idsupdate utility on the Sensor to schedule automatic pulls. idsupdate will poll a designated ftp server for updates (signature or service packs) and if it finds a new one, it will pull it down to the Sensor and install it. I believe that in a future version of the IDS management application the management application will provide a means of triggering the pull.