43-6
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 43 Managing IPS Sensors
Managing IPS Updates
Step 1 Select Tools > Security Manager Administration and select IPS Updates from the table of contents
to open the IPS Updates page (see IPS Updates Page, page 11-30).
Step 2 Review the status information in the Update Status group, and do any of the following:
•Click Check for Updates. A dialog box opens to display the results of the operation. Click Start to
have Security Manager log into the IPS Update server and check for updates.
•Click Download Latest Updates. A dialog box opens to display the results of the operation. Click
Start to have Security Manager log into the IPS Update server, check for updates, and download
them to the Security Manager server.
Tip If a Cisco.com download fails, ensure that the account you are using has applied for eligibility
to download strong encryption software. For details, see the description of User Name in Edit
Update Server Settings Dialog Box, page 11-34.
Automating IPS Updates
You can automatically apply sensor image and signature updates to compatible IPS devices to ensure
that they are up to date. If desired, you can partially automate the updates to maintain the desire d level
of control over the process.
Tip If you later decide that you did not want to apply a signature update, you can revert to the previous update
level by selecting the Signatures policy on the device, clicking the View Update Level button, and
clicking Revert.
Tip If you do not manage IPS devices, consider taking the following performance tuning step. In
$NMSROOT\MDC\ips\etc\sensorupdate.properties, change the value of packageMonitorInterval from
its initial default value of 30,000 milliseconds to a less-frequent value of 600,000 milliseconds. Taking
this step will improve performance somewhat. [$NMSROOT is the full pathname of the Common
Services installation directory (the default is C:\Program Files\CSCOpx).]
Before You Begin
You must configure the IPS Update server as described in Configuring the IPS Update Server, page 43-4.
Related Topics
•Checking for IPS Updates and Downloading Them, page 43-5
•Manually Applying IPS Updates, page 43-7
•Understanding IPS Network Sensing, page 35-1
•Deploying Configurations in Non-Workflow Mode, page 8-29
•Deploying Configurations in Workflow Mode, page 8-35
Step 1 Select Tools > Security Manager Administration and select IPS Updates from the table of contents
to open the IPS Updates page (see IPS Updates Page, page 11-30).