global correlation can't updated

Unanswered Question
Jun 9th, 2010
User Badges:

version is IPS7.0, asa5520-aip-ssm.
Singatrue and  IME can be sucessfully updated,
Global correlation can't updated,
the Status of global correlation is Critical.
I saw the website
and updated following the web page. But  can't work it.

How could I update global correlation
or go back old sensorbase?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Scott Fringer Wed, 06/09/2010 - 03:37
User Badges:
  • Cisco Employee,

Have you configured a DNS server or proxy server on your sensor?  Global correlation relies on the ability to resolve the update server's name to IP address.  Your screen-shot seems to indicate this is the likely issue as it reports "Unknown" for the Update Server Address.

You can add a DNS server by navigating to Configuration>Sensor Setup>Network


bh_zhi Thu, 06/10/2010 - 23:22
User Badges:

DNS has configured as cisco's web page said,

updated information:    update server:update-manifests.ironpo

                                  update server address: unkown

the website is ips itself contains,

whether  should I change the website to update global correlation or not

and which website is right can you tell me ?

edadios Fri, 06/11/2010 - 00:23
User Badges:
  • Silver, 250 points or more

The site is ""

Is this what you have configured? If not, correct it to the above.


Scott Fringer Fri, 06/11/2010 - 03:33
User Badges:
  • Cisco Employee,

The output provided clearly indicates that the AIP-SSM is unable to resolve the update server address.  The server name is not user configurable.

Do you have more than one DNS server configured?  If so, disable all but the primary DNS server.

If you only have one DNS server configured, please verify the AIP-SSM's management IP address has unrestricted access to the Internet.  (At a minimum TCP ports 80 and 443 and UDP port 53).



This Discussion