IPS Signatures for Cisco IOS

gibber

Hi all,
New user to the forums!

Being a student and as part of a study surrounding vulnerabilities and exploits, I am currently doing experiments using intrusion prevention mechanisms in IOS as and the effectiveness of these systems and also the potential performance impact that using IPS has on traffic passing through a router.

I have a Cisco 2851 ISR that I intend to run these experiments on.

I've been looking for the latest (or or least a relatively new signature file) in order to get IPS running, preferably something like release 885 onwards that covers Windows server IIS exploit CVE-2015-1635 - as this will be part of the basis of my study due to its severity and simplicity and whether Cisco IPS is effective at blocking this type of attack.

Unfortunately a Cisco license would not be feasible for this purpose as it would be far too expensive. Would anyone have a recent signature file they could kindly donate?

Thank you!

creamy_stew

Hi and welcome to the forums!

Firstly, I just have to commend you on your first post. It's like the Shakespeare of first posts

Secondly, can you provide the full or partial name of the file?

Gngogh

Hi. To get the latest files. Go to cisco web site to get the name of the file. And then im sure u can find it somewhere on the internet.