Re: Updating Enterasys Dragon NIDS signature...

[Jordan Wiens <numatrix () ufl edu>]

That's odd, they're usually pretty helpful in my experience.  Even better 
is the mailing list, though.  That's often the best place to ask dragon 
related questions (dragonidsuser () enterasys com).

What version of NIDS are you running?  The signatures are all available 
for manual download directly from the enterasys website: 
https://dragon.enterasys.com/ (the website also has archives of the 
mailing list, so does marc.theaimsgroup.com)

Depending on your architecture, you can either manually push out the 
signatures using scp and ssh to your sensors from another machine on the 
closed network, or import the new signatures into your dragon policy 
manager (DPM, or whatever it's called with whatever version you're 
running) and have it push them out.

--
Jordan Wiens, CISSP
UF Network Security Engineer
(352)392-2061

On Sat, 6 Aug 2005, Jean-Pierre Denis wrote:

> Hi everyone,
>
>
>  I have a bunch of Dragon NIDS to update but they don't have internet
>  connection to do so. Since it's a closed network the update screw up
>  everytime because enterasys designed it to access their site.
>
>  Does someone have this type of experience with Dragon appliance?
>
>  Enterasys is not very helpful and I don't know where to start.
>
>
> Merci,
> Jean-Pierre Denis
> (LPIC1 - LPIC2)
> WebGlobe Solutions TI
> email: jp () webglobe ca
> tel.: (819) 246-0WWW (0999)
> www:   http://www.webglobe.ca
>
>
> -----------------------------------------
> WebMail Powered by WebGlobe.
> http://www.webglobe.ca
>
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
> to learn more.
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------