IDSM hangs after sig update

costin.vilcu · ‎05-12-2009

Hi,

i have a customer with 12 blades IDSM on 7600's and every time he update the signatures at least on one of the blades the web server hangs or something related with this. He solves the issue by restarting the module which is not an answer. All the blades run 6.2.1 E3.

Any ideea what to look for? the analysis engine runs ok. Could it be a browser problem?

Thank you,

Costin

mchin345 · ‎05-18-2009

Here are some possible fixes for this issue:

1) Can you first upgrade the IDSM to the latest patch level). You will find the patch software at

http://www.cisco.com/cgi-bin/tablebuild.pl/ids-patches

2) You can try to upgrade the Signature Manually.

Farrukh Haroon · ‎05-20-2009

This is a frequent issue with IDSMs. We have four at one customer and it happens all the time.

Yesterday only I found that when I tried to save the configuration on one of them, got the following error:

Error: editConfigDeltaSignatureDefinition : ct-sensorApp.17271 not responding, please check system processes - The connect to the specified Io::ClientPipe failed.

The configuration changes failed validation, no changes were applied.

Would you like to return to edit mode to correct the errors? [yes]: exit

% Please answer 'yes' or 'no'.

Would you like to return to edit mode to correct the errors? [yes]:

Before (two weeks or so ago), I did a signature update and 2 out of 4 would not go with the upgarde. Then I found some document on Cisco support wiki to logon using service account and re-create the cache files or something.

http://supportwiki.cisco.com/ViewWiki/index.php/User_receives_the_Analysis_Engine_is_currently_busy_and_unable_to_process_this_update_error_message_during_an_upgrade

Regards

Farrukh