Forum Discussion

Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
May 02, 2012

Automatic Signatures Updates from EM to ASM

Hello Aaron/All,

 

 

How do we push automatic signature updates from Enterprise manager to the ASMs on a regular basis.

 

 

Im running Enterprise version 10.2.3

 

Im runnng ASM version 10.2.4

 

 

I know i can schedule it

 

 

Queries

 

 

1) Do i download 10.2.4 ISO file in the shared/images of the EM box and then schedule it to be pushed ?

 

2) Currently in the EM-->task List , i do see the daily update of attack signature (as its scheduled daily) but there are actually no updates hapening. Is it becasue there are no 10.2.4 updates download.

 

3) Shouldnt EM be automatically downloading the 10.2.4 signatures and installing it in the ASMs.

 

 

 

Any inouts will be of great help - thanks.

 

 

regards,

 

Nik

 

  • Hi Nik,

     

     

    here you go..

     

    1) Do i download 10.2.4 ISO file in the shared/images of the EM box and then schedule it to be pushed ?

     

    Ans) The 10.2.4 ISO file is the total BigIP package and used when you are upgrading your appliance. Not used for ASM signature updates.

     

     

    2) Currently in the EM-->task List , i do see the daily update of attack signature (as its scheduled daily) but there are actually no updates hapening. Is it becasue there are no 10.2.4 updates download.

     

    Ans) I believe, the task you are seeing is your enterprise manager communicating to F5 portal to see if there are any new signature updates that it can download. And as F5 do not release signatures very often, you are seeing that there are no updates.

     

     

    3) Shouldnt EM be automatically downloading the 10.2.4 signatures and installing it in the ASMs.

     

    Ans) No, the EM only downloads the new signature to the EM appliance. You have manually create a task to install them on the ASM appliances.

     

     

    Hope this helps.

     

     

    - Santosh.