Sunday, December 4, 2016

Officially update feeds for OSSIM or USM.

Directly Quoted from: https://www.alienvault.com/documentation/usm-v5/ids-configuration/updating-alienvault-nids-rules.htm

To install threat intelligence updates using the web interface
  1. Navigate to Configuration > Deployment > Components > AlienVault Center.
  2. Click the yellow arrow in the New Updates column next to the USM appliance you want to install the updates on.
  3. Examine the available updates.
    NIDS updates contain “suricata” in the package name.
  4. Click Update Feed Only.
    Note: This updates signatures and rules for all packages listed in the update summary, not just the IDS signatures.
The upgrade process can take several minutes. After completion, the page displays a message indicating a successful update.
To install threat intelligence updates in the AlienVault Setup Menu
  1. Launch the AlienVault console.
  2. Select System Preferences; press Enter (<OK>).
  3. Select Update AlienVault System; press Enter (<OK>).
  4. Select Update Threat Intelligence; press Enter (<OK>).
  5. Confirm your selection.
    Note: The AlienVault console does not show the list of available updates, but you can check the update progress.
The upgrade process can take several minutes. After completion, the console displays a message indicating a successful update.

No comments:

Post a Comment