IPS Module Signature Automatic Signature Updates

So when upgrading IPS Modules you can do automatic signature updates:

These updates will use the following URL's from Cisco and you will need a CCO account to down from the server.



Prior to 7.0(8), it should look like this:
https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl
From 7.0(8) and 7.1(5) and later, it should look like this:
https://72.163.4.161//cgi-bin/front.x/ida/locator/locator.pl
Note: Please do not edit the URL. The // is intentional and not a typo.





CLI:




IPS# config t

IPS(config)# service host

IPS(config-hos)# auto-upgrade

IPS(config-hos-aut)#cisco-server enabled 

After this you will end up scheduling the time and period and intervals in which you want to run the auto update

schedule-option
periodic-schedule
start-time:
interval: 2 hours (example)

user-name : CCOACCOUNT
password:  PASSWORD TO ACCOUNT
cisco-url:  URL Provided earlier depending on IPS Version

user-server disabled




After all said and done you should be able to do a "show settings" to verify you're settings are applied. 

Example:
IPS(config-hos-aut)# show settings
   auto-upgrade
   -----------------------------------------------
      cisco-server
      -----------------------------------------------
         enabled
         -----------------------------------------------
            schedule-option
            -----------------------------------------------
               periodic-schedule
               -----------------------------------------------
                  start-time: 00:00:00
                  interval: 2 hours
               -----------------------------------------------
            -----------------------------------------------
            user-name: myusername
            password: <hidden>
            cisco-url: https://72.163.4.161//cgi-bin/front.x/ida/locator/locator                      .pl default: https://72.163.4.161//cgi-bin/front.x/ida/locator/locator.pl
         -----------------------------------------------
      -----------------------------------------------
      user-server
      -----------------------------------------------
         disabled
         -----------------------------------------------
         -----------------------------------------------
      -----------------------------------------------
   -----------------------------------------------









Comments

Popular posts from this blog

HULC LED PROCESS - 3750 High CPU

%PLATFORM_UCAST-4-PREFIX: --------- TCAM 3750 Switch