Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
788
Views
0
Helpful
9
Replies

SDM 2.4 and IPS V5

Go to solution
ynyng
Level 1
Level 1

‎04-20-2007 01:52 PM - edited ‎03-10-2019 03:34 AM

Does V5 IPS not work with SDM? I get the message "IPS not supported" using IOS 12.4(11)T1. CLI show IPS working.

Labels:
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
ymzhang
Level 1
Level 1

‎04-20-2007 01:55 PM

SDM need 12.4(11)T2 or later image to support IOS IPS in 5.x signature format due to some issues in IOS.

For 12.4(11)T1, the best option is to use CLI for now.

Also please refer http://www.cisco.com/en/US/products/ps6634/products_white_paper0900aecd805c4ea8.shtml

Thanks,

-Chris

View solution in original post

0 Helpful
9 Replies 9

Go to solution
ymzhang
Level 1
Level 1

‎04-20-2007 01:55 PM

SDM need 12.4(11)T2 or later image to support IOS IPS in 5.x signature format due to some issues in IOS.

For 12.4(11)T1, the best option is to use CLI for now.

Also please refer http://www.cisco.com/en/US/products/ps6634/products_white_paper0900aecd805c4ea8.shtml

Thanks,

-Chris

0 Helpful

Go to solution
ynyng
Level 1
Level 1
In response to ymzhang

‎04-20-2007 02:03 PM

Thank you Chris!

0 Helpful

Go to solution
ymzhang
Level 1
Level 1
In response to ynyng

‎04-20-2007 02:06 PM

any time! -Chris

0 Helpful

Go to solution
juan_m_12
Level 1
Level 1

‎04-30-2007 05:20 PM

hi, i got the same issue, with IOS c2800nm-advipservicesk9-mz.124-11.T1.bin image, i will need to read the full document mentionated above

thanks

0 Helpful

Go to solution
scottyd
Level 1
Level 1
In response to juan_m_12

‎05-03-2007 02:04 PM

Hi,

Is anyone else having high memory issues when using ver 5? I have installed on a 1801 with 128 M memory. It only has 4 M free now. Is there a way to reduce the active signatures? I have disbaled some but the number of active is still at 338.

Thanks,

Scott

0 Helpful

Go to solution
ymzhang
Level 1
Level 1
In response to scottyd

‎05-03-2007 03:26 PM

you can use IOS IPS CLI to retire un-needed signatures.

ip ips signature-definition

signature 3307 0

status

retired true

Be sure to answer yes to the prompt when exiting the CLI configuration.

Do you want to accept these changes? [confirm]y

Once a signature is retired, it wont be compiled by IOS IPS.

-Chris

0 Helpful

Go to solution
jeremy_liao
Level 1
Level 1
In response to ymzhang

‎07-24-2007 09:08 AM

hi,

what is different between "retired ture/false" and "enabled ture/false", thanks

0 Helpful

Go to solution
nicksmi
Cisco Employee
Cisco Employee
In response to jeremy_liao

‎07-24-2007 10:41 AM

When a signature is retired, it is no longer processed by the engine, saving memory.

When a signature is disabled, it is still processed by the engine, but will not display alerts when it is triggered.

0 Helpful

Go to solution
jeremy_liao
Level 1
Level 1
In response to nicksmi

‎07-24-2007 05:12 PM

thank you.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card