Systech Solutions LTD.

IN THIS ISSUE:

1.     Announcing the S420 Signature Update for IPS

2.     The Cisco IPS Active Update Bulletin is changing!

3.     Announcing IPS Version 6.0(6)E3 Service Pack

4.     Cisco Announces IPS Software 7.0 with Global Correlation

5.     Cisco IDS 4235 and IDS 4250 sensors end of signature support

6.     EOS and EOL dates for Cisco IPS Sensor Software Version 6.1

7.     Cisco IPS Signature correlation available in the Cisco Security IntelliShield Alert Manager Service

8.     Subscribe to the Product Alert Tool for IPS Related Field Issues

9.     Subscription Information

1. Announcing the S420 Signature Update for IPS

The S420 signature update contains the following new signatures:

The S420 signature update contains the following modified signatures:

There are no tuned signatures for this release.

Modified  signature details:  None.

IMPORTANT NOTES:

All signature updates are cumulative. The S420 signature update contains all previously released signature updates.

You must have a valid Cisco Services for IPS contract per sensor to receive and use software upgrades including

signature updates from Cisco.com.

A Cisco Services for IPS Services License is required for the installation of all signature updates. The Cisco Services

for IPS Services License can be requested from http://www.cisco.com/go/license for all sensors covered by a

maintenance contract.

To manage your maintenance contracts use the Service Contract Center:

http://www.cisco.com/cgi-bin/front.x/scccibdispatch?AppName=ContractAgent

SUPPORTED PLATFORMS:

The S420 signature update can ONLY be applied to E3 sensors.

IPS S420 Software Update Files:

Please note that the signature update download location has changed.

Sensor appliances, IDSM2, NM-CIDS, ASA-SSM-AIP modules: click here

IOS IPS in 12.4(11)T or later T-Train Releases:

http://www.cisco.com/pcgi-bin/tablebuild.pl/ios-v5sigup

Note: Posting of signature release files for IOS IPS may take a few additional days.

CISCO SECURITY MANAGER (CSM) NOTICE:

Note 1:

You can only apply the IPS-CS-MGR-sig-S420-req-E3.zip signature update file to CSM 3.0 or later and IPS MC version 2.2 or

later. The E3 Engine Update packages for sensors are deployed automatically the first time a signature set that requires

E3 is deployed by CSM. E3 updates are not listed or available for selection in the Apply Update Wizard and cannot be

applied independently by CSM. To ensure that the E3 update is applied to your sensors, please ensure

that you push the S366 package to your sensors.

2. The Cisco IPS Active Update Bulletin is changing!

As part of our continuous improvements to Cisco IPS, we are updating the Cisco IPS Active Update Bulletin. Expect an improved layout, more information, faster access to the links you need and much more! Watch your inbox – the improved bulletin will arrive in a few short weeks!

3. Announcing IPS Version 6.0(6)E3 Service Pack

Downloads are available here.

4. Cisco Announces IPS Software 7.0 with Global Correlation

With Global Correlation, Cisco IPS receives global threat updates from Cisco every five minutes, gaining rapid visibility into the reputation of known attackers and networked threats, as well as propagation and mutation trends. This added context enables Cisco IPS to stop twice as much malicious activity as traditional IPS systems that rely on local inspection only.

Cisco IPS v7.0 with Global Correlation is available now to all Cisco IPS customers with current Cisco Services for IPS support contracts. IPS v7.0 is available for all ASA AIP modules, 4240 4255, 4260, 4270 sensor appliances, NME-IPS, and AIM-IPS Network Modules and the IDSM2 module and can be downloaded from the Cisco Security Software Center using your existing valid support license.

The Release notes for IPS 7.0 are available at this location.

5. Cisco IDS 4235 and IDS 4250 sensors end of signature support

Cisco IDS 4235 and IDS 4250 sensors have reached end of signature support. If you are still using IDS 4235 and IDS 4250 sensors, please contact your Cisco sales representative regarding migration plans to newer Cisco IPS sensors. More information including recommended migration options is available at this web page: http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/prod_eol_notices_list.html

6. EOS and EOL dates for Cisco IPS Sensor Software Version 6.1

More information is available at the End of Sale Page on Cisco.com.

7. Cisco IPS Signature correlation available in the Cisco Security IntelliShield Alert Manager Service Search Access Feature

The IntelliShield Alert Manager Search Access Feature provides clients with access to one of the most extensive collections of vendor-neutral security intelligence alerts in the industry. Clients can access a fully indexed and searchable database that extends back over six years and contains more than 1700 vendors, 5500 products, and 20,000 distinct versions of applications.

To obtain access to the IntelliShield Alert Manager Search Access Feature, each user is required to provide either a valid IPS License File or a valid IPS Serial Number to authorize the creation of this user account. Only one user account is permitted for each IPS License File or IPS Serial Number. Please proceed to the registration page at the following link to obtain your access:

https://intellishield.cisco.com/security/alertmanager/intelliShieldSearch 

Email support is available for users of the Cisco Security IntelliShield Alert Manager Service Search Access Feature at  intellishieldsearch-support@cisco.com . Support is provided by Cisco during the hours of 7:00 a.m. and 7:00 p.m. Eastern Time.

8. Subscribe to the Product Alert Tool for IPS Related Field Issues

Simply visit: http://tools.cisco.com/Support/PAT/do/ViewMyProfiles.do  and follow these steps:

- Select Create a new Alert Profile.
- Name your profile anything you would like.
- Under Select Your Product, select: Intrusion Prevention System
- Click Add so that “Intrusion Prevention System” is added to the “Products in your profile” list
- Select the message types you wish to receive
- Confirm your email address
- Click Submit.

You will be kept up to date with the latest news on your IPS hardware appliances.

9. Subscription Information

If you wish to receive this bulletin, you can subscribe now.

Your opinions are important to us. If you have feedback about the Active Update Bulletin, please contact us at ips-news@cisco.com. For technical support, sales or other issues, please contact your authorized Cisco reseller or Cisco TAC. Please note that technical support or sales questions sent to this address will not be answered or redirected.
 

Additional Information

Links

• Software Center – Download the latest Cisco IPS software.
• User Forum – Participate in the IPS Forum, part of our Networking Professionals Connection.
• Home Page – Visit our Cisco IPS home page for product literature, news, and awards.
• Cisco Security Center- Visit the Cisco Security Center site for information on emerging threats and the Cisco network IPS signatures available to protect your network..
• CRMS – Cisco Remote Managed Services for Security
• Training – Learn about available IPS training courses and Cisco Security Certifications.
• IPS Technical Documentation – Visit our Cisco IPS Technical Documentation site for configuration guides, maintenance guides, release and installation notes and more
• IntelliShield Alert Manager Search Access Feature – Search through an extensive collection of security intelligence reports. Registration required.