IPS signature update not showing up in Event Management

Unanswered Question
Feb 18th, 2009


Last week, signature update S381 was imported in our Mars 6.0.2(3102)

Of this update S381 some events show up in the event-management list while others don't. E.g. event-id 1950377 is visible, whereas event-id 1950378 or 1950382 (CVE-2009-0075) aren't. What's wrong?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Beat.Traber Fri, 02/20/2009 - 02:30

Update S382 didn't change a thing. Event-ID have been inserted, but ID 1950378 or 1950382 are still not visible. CVE-2009-0075 does not show when using a query. In fact, none of the CVE-2009- does show. Any ideas? Something wrong with the XML-File?

Beat.Traber Sun, 02/22/2009 - 23:12

No change with downloading S383. Several Events are still omitted.

If you open 381.edu.inc.xml in your webbrowser it says explicitely that there is an error in the file.

Anybody from Cisco reading this? And perhaps even able to fix it?


This Discussion