Forum Discussion
Nik_67256
Nimbostratus
NimbostratusAutomatic Signatures Updates from EM to ASM
Hello Aaron/All,
How do we push automatic signature updates from Enterprise manager to the ASMs on a regular basis.
Im running Enterprise version 10.2.3
Im runnng ASM version 10.2.4
I know i can schedule it
Queries
1) Do i download 10.2.4 ISO file in the shared/images of the EM box and then schedule it to be pushed ?
2) Currently in the EM-->task List , i do see the daily update of attack signature (as its scheduled daily) but there are actually no updates hapening. Is it becasue there are no 10.2.4 updates download.
3) Shouldnt EM be automatically downloading the 10.2.4 signatures and installing it in the ASMs.
Any inouts will be of great help - thanks.
regards,
Nik
santosh_81454Hi Nik,
here you go..
1) Do i download 10.2.4 ISO file in the shared/images of the EM box and then schedule it to be pushed ?
Ans) The 10.2.4 ISO file is the total BigIP package and used when you are upgrading your appliance. Not used for ASM signature updates.
2) Currently in the EM-->task List , i do see the daily update of attack signature (as its scheduled daily) but there are actually no updates hapening. Is it becasue there are no 10.2.4 updates download.
Ans) I believe, the task you are seeing is your enterprise manager communicating to F5 portal to see if there are any new signature updates that it can download. And as F5 do not release signatures very often, you are seeing that there are no updates.
3) Shouldnt EM be automatically downloading the 10.2.4 signatures and installing it in the ASMs.
Ans) No, the EM only downloads the new signature to the EM appliance. You have manually create a task to install them on the ASM appliances.
Hope this helps.
- Santosh.