IPS 5.1-4 Stability problem

[dontignyma]

Is anyone experienced stabiliy problem with the Cisco 5.1-4 ???

[mhellman]

Yes. There are some bugs that cause the system to stop working. The state string bug goes back to 5.1.2. The other 2 I'm aware of have to do with the new SMB and TNS inspection engines. 5.1.5 is supposed to be released to address these very soon.

[dontignyma]

Wow, this is not good... By the way, you have probably notice a decrease in the eventstore buffer size too for the 5.1-X code.This cause the EventStore file to wrap around. Are you aware of a way in order to increase the event store buffer size for 4235 ?? I know that 4235 won't be supported in a near future but we did appreciate the 4GO buffer size functionnality of the 4.x code.

Thanks again for your quick reply

Cheers

Marc

[edwakim]

No there is no way to increase the event store buffer size for 4235.

By the way, IPS 5.1(5) is out.

It has fixes for both SMB bug and TNS bug that Matthew mentioned above.

Thank you.

Edward

[edwakim]

Sorry, forgot to mention that 5.1(5) has a fix for state-string bug as well.

Thanks.

Edward