IPS signature update not showing up in Event Management

Unanswered Question
Feb 18th, 2009
User Badges:


Last week, signature update S381 was imported in our Mars 6.0.2(3102)

Of this update S381 some events show up in the event-management list while others don't. E.g. event-id 1950377 is visible, whereas event-id 1950378 or 1950382 (CVE-2009-0075) aren't. What's wrong?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Beat.Traber Fri, 02/20/2009 - 02:30
User Badges:

Update S382 didn't change a thing. Event-ID have been inserted, but ID 1950378 or 1950382 are still not visible. CVE-2009-0075 does not show when using a query. In fact, none of the CVE-2009- does show. Any ideas? Something wrong with the XML-File?

Beat.Traber Sun, 02/22/2009 - 23:12
User Badges:

No change with downloading S383. Several Events are still omitted.

If you open 381.edu.inc.xml in your webbrowser it says explicitely that there is an error in the file.

Anybody from Cisco reading this? And perhaps even able to fix it?

Beat.Traber Wed, 02/25/2009 - 23:50
User Badges:

Still no change with S384 and S385

Anybody reading this?


This Discussion