Cisco Talos Update for FireSIGHT Management Center

This SRU number: 2018-08-06-001
Previous SRU number: 2018-08-03-001

Applies to:

This SEU number: 1891
Previous SEU: 1890

Applies to:

This is the complete list of rules modified in SRU 2018-08-06-001 and SEU 1891.

The format of the file is:

GID - SID - Rule Group - Rule Message - Policy State

The Policy State refers to each default Cisco Talos policy, Connectivity, Balanced, Security, and Maximum Detection.

The default passive policy state is the same as the Balanced policy state with the exception of alert being used instead of drop.

Note: Unless stated explicitly, the rules are for the series of products listed above.

Updated Rules:

**High Priority**
GID	SID	Rule Group	Rule Message	Policy State
GID	SID	Rule Group	Rule Message	Con.	Bal.	Sec.	Max.
1	15421	DELETED	CONTENT-REPLACE AIM or ICQ deny login for unencrypted connection	off	off	off	off
1	1631	DELETED	POLICY-SOCIAL AIM login	off	off	off	off
1	1632	DELETED	CHAT AIM send message	off	off	off	off
1	1633	DELETED	POLICY-SOCIAL AIM receive message	off	off	off	off
1	3825	DELETED	POLICY-SOCIAL AOL Instant Messenger Message Send	off	off	off	off
1	3826	DELETED	POLICY-SOCIAL AOL Instant Messenger Message Receive	off	off	off	off
1	43825	MALWARE-CNC	Osx.Trojan.XAgent outbound connection	off	off	off	off
1	46999	INDICATOR-COMPROMISE	SettingContent-ms file type download attempt	off	off	drop	drop
1	47000	INDICATOR-COMPROMISE	SettingContent-ms file type download attempt	off	off	drop	drop
1	47001	INDICATOR-COMPROMISE	SettingContent-ms file type download attempt	off	off	drop	drop
1	47002	INDICATOR-COMPROMISE	SettingContent-ms file type download attempt	off	off	drop	drop

**Medium Priority**
GID	SID	Rule Group	Rule Message	Policy State
GID	SID	Rule Group	Rule Message	Con.	Bal.	Sec.	Max.
1	1393	DELETED	POLICY-SOCIAL AIM AddGame attempt	off	off	off	off
1	1752	DELETED	POLICY-SOCIAL AIM AddExternalApp attempt	off	off	off	off