Autoupdate IPS signature not working

jgranda · ‎06-10-2009

I am getting the following on the IPS auto-update

Auto Update Statistics

lastDirectoryReadAttempt = 02:30:00 Eastern Tue Jun 09 2009

= Read directory: http://198.133.219.25/pcgi-bin/tablebuild.pl/ips6-sigup

= Error: http error response: 400

lastDownloadAttempt = N/A

lastInstallAttempt = N/A

nextAttempt = 02:30:00 Eastern Wed Jun 10 2009

Auto Update Statistics

lastDirectoryReadAttempt = 02:13:00 Eastern Wed Jun 10 2009

= Read directory: http://198.133.219.25/pcgi-bin/tablebuild.pl/ips6-sigup

= Error: http error response: 400

lastDownloadAttempt = N/A

lastInstallAttempt = N/A

nextAttempt = 02:13:00 Eastern Thu Jun 11 2009

Can you tell me what I am doing wrong.

abinjola · ‎06-10-2009

Ensure your SSM can connect to internet, try by pinging from SSM to 4.2.2.2

Also correct the URL..

https://198.133.219.25//cgi-bin/front.x/ida/locator/locator.pl

jgranda · ‎06-11-2009

Thanks for the response. I change the URL and it did not make any difference. I am able to ping 4.2.2.2

I still getting the 400 error. Anything else I need to do.

abinjola · ‎06-11-2009

is management IP getting routed through ASA inside interface ? if yes then kindly get me the packet captures

access-list abc permit ip host host 198.133.219.25

access-list abc permit ip host 198.133.219.25 host

capture cpi access-l abc interface

Intf.Name-->INterface on ASA which is part of same VLAN as IPS Mngmt IP

Also send me the latest show statistics host

George Thomas · ‎06-23-2009

To add to the wonderful comment by Ashish, I had the same problem and fixed it by changing the "//" after the IP address to "/".

Please rate useful posts.

bbiandov · ‎02-12-2014

What was is the CORRECT current URL which actually works in the real world; NOT lifted off some wrong documentation? I mean working URL - copy and paste from a working setup please?

Thanks

Naveen Kumar · ‎02-13-2014

Update the Auto Update URL Using the CLI (all other IPS versions)

NOTE: Do not change the double slash (//) at the end of the IP address shown in this configuration.

sensor#config t sensor(config)#service host sensor(config-hos)#auto-upgrade sensor(config-hos-aut)#cisco-server enabled sensor(config-hos-aut-ena)#cisco-url https://72.163.4.161//cgi-bin/front.x/ida/locator/locator.pl sensor(config-hos-aut-ena)#exit sensor(config-hos-aut)#exit sensor(config-hos)#exit Apply Changes?[yes]:yes