Hi, I've upgraded one IPS (ASA-SSM-20) to release 7 and now I can't see any events on it and obviously MARS doesn't receive any data from IPS. I've tested that virtual sensor is assigned to Gigabit Ehternet 0/1 and Global correlation seems to work ok. I've upddated the signatures to S407 too. Anyone with similoar problem?.
Hi Jorge, I've discovered that my secondary ASA was active, so this was my problem because IPS is only configurated for the other ASA. I've changed it and at the moment it's working. I hope this help you.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...