I turned on the netsky signature, and turned tcp reset/shun/block ip, but I am still seeing ton of netsky infected emails coming into my network.

CISCO IDS signature update is truly frustrating. I understand that you can not pull the signature from Cisco site automatically to sensor. But how about can you automatically download it to your ftp server at least? If yes, any one has some script to...