Hi, I've upgraded one IPS (ASA-SSM-20) to release 7 and now I can't see any events on it and obviously MARS doesn't receive any data from IPS. I've tested that virtual sensor is assigned to Gigabit Ehternet 0/1 and Global correlation seems to work ok. I've upddated the signatures to S407 too. Anyone with similoar problem?.
Hi Jorge, I've discovered that my secondary ASA was active, so this was my problem because IPS is only configurated for the other ASA. I've changed it and at the moment it's working. I hope this help you.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
