Managing The Ips Signature Library; Scheduling An Ips Signature Automatic Update - HP MSR Series Configuration Manual

Step
1. Enter system view.
2. Configure the security
zones.
3. Create a zone pair and enter
its view.
4. Apply an object policy to the
zone pair.

Managing the IPS signature library

You can update or roll back the version of the IPS signature library on the device.

Scheduling an IPS signature automatic update

If the device can access the signature database services on the TippingPoint website, you can
schedule an automatic update. The automatic update enables the device to automatically update the
local signature library at the scheduled update time.
For a successful automatic update, make sure the device can resolve the IP address of the
TippingPoint website through DNS, and can connect to the TippingPoint website. For more
information about DNS, see Layer 3—IP Services Configuration Guide.
To schedule an IPS signature automatic update:
Step
1. Enter system view.
2. Enable automatic IPS
signature library update.
3. Schedule the update time.
4. Configure the device to
overwrite the current IPS
signature library without
backing up the library during
an automatic signature
library update.
Command
system-view
security-zone name zone-name
zone-pair security source
source-zone-name destination
destination-zone-name
•
Apply an IPv4 object policy
to the zone pair:
object-policy apply ip
object-policy-name
•
Apply an IPv6 object policy
to the zone pair:
object-policy apply ipv6
object-policy-name
Command
system-view
ips signature auto-update
update schedule { daily | weekly
{ mon | tue | wed | thu | fri | sat |
sun } } start-time time tingle
minutes
override-current
582
Remarks
N/A
The default security zones Any,
Local, Trust, DMZ,
Management, and Untrust are
automatically created when you
create the first security zone on
the device.
By default, no zone pairs exist.
Use either command.
By default, no object policy is
applied to a zone pair.
Remarks
N/A
By default, automatic IPS
signature library update is
disabled.
By default, the device updates the
IPS signature library at a random
time between 00:00:00 and
04:00:00 every day.
By default, the device backs up
the current IPS signature library
before replacing it with a new
library.