We are noticing a strange behavior with several IPS AIM modules and IPS Appliances. Events are generated and can be seen from the event viewer but nothing is displayed on the Network Security Gadget on the Dashboard.
We've verified and compared configurations with other working Appliances and can't find why the count event on the dashboard is 0 while the event viewer is showing several events. We've tested from different computers with different Java versions to rule out a problem with the viewer, but the result is the same.
IPS is working and denying traffic if configured, the event action overrides are configured to produce alert for all severities (to test).
We've seen this on Appliances and ASA IPS modules running 7.0(1)3, 6.0(5)E3 and other 6.x versions, the only common denominator we can see is the E3.
It's a difficult event to troubleshoot and I haven't found any reports from similar behavior, has anyone noticed something similar?
Any ideas on where to look will be greatly appreciated.