Hi, I've upgraded one IPS (ASA-SSM-20) to release 7 and now I can't see any events on it and obviously MARS doesn't receive any data from IPS. I've tested that virtual sensor is assigned to Gigabit Ehternet 0/1 and Global correlation seems to work ok. I've upddated the signatures to S407 too. Anyone with similoar problem?.
Hi Jorge, I've discovered that my secondary ASA was active, so this was my problem because IPS is only configurated for the other ASA. I've changed it and at the moment it's working. I hope this help you.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
