Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Cannot deploy updated signatures on IPS vs1


I'm trying to submit and deploy updated config info to my IPS device.  I have two virtual sensors, vs0 and vs1.  I am getting a deployment failure trying to update vs1 with the following info:

Failed to generate edit config delta  for analysisEngine component. Detail: Error encountered while converting IpsVirtualSensor to current config
Detail: Fail to generate virtual sensor current config.
Detail: Virtual sensor vs1 change might not be submitted or approved in the activity in workflow mode.

I don't see that vs1 is in workflow mode.  Is there anything I can double-check as to why I'm getting this error?



Re: Cannot deploy updated signatures on IPS vs1

Hello Todd,

This message is the result of CSM's inability to commit the configuration. There are several causes for this that we'll need to investigate.

This issue is probably best resolved via a TAC case if you have means to open one.

We first need to answer a few preliminary questions:

What version of CSM are you running?

What version of code is the IPS running?

- Please include System, Engine, and Signature versions.

Are you in workflow mode?

Are you authenticating via ACS or doing local authentication?

We will also need a

Tools -> Security Manager Diagnostics

Thank you,
Blayne Dreier
Cisco TAC IDS Team

**Please check out our Podcast**
TAC Security Show:

New Member

Re: Cannot deploy updated signatures on IPS vs1

Hi Blaine,

This is George Nussbaum, Todd's associate.  I opened the ticket.  I will open a TAC case as you advised.



CreatePlease to create content