Cisco ASA5585-SSP-IPS60 Global Correlation - Status CRITICAL

mdshahariarnoor1 · ‎11-15-2016

Please help I am facing problem configuring Global Correlation every time it is showing that the status is CRITICAL and it is not turning Green and I am using Cisco IPS Manager Express 7.2.7.

Product : ASA5585-SSP-IPS60

Cisco Intrusion Prevention System, Version 7.3(5)E4

Please help me asap.

THANKS,

HRIDOY

Marvin Rhoads · ‎11-17-2016

You have a version newer than the required 7.3(4)E4 which is necessary to trust Cisco's new SHA-2 signed certificates; so that's OK.

(Reference: http://www.cisco.com/c/en/us/support/docs/field-notices/640/fn64080.html )

Is your IPS able to reach the internet for things like signature updates?

Marvin Rhoads · ‎11-23-2016

Also note - you were probably hitting the issue where Cisco issued new certificates on their servers used for Global Correlation last week. If you "edit" the alert in IME and then just click "OK", IME will prompt you to accept the new certificate. After you do that, the status should change to OK within a minute or less.