IPS auto update

[k.abillama]

Hello, Customers having IPS 4215 version 6.0(5)E3 are having their sensor crashing following auto update from an FTP server.

The web interface is no more accessible and the analysis engine stopped( I've attached the show tech-support)

The problem happened with different signatures S383 and S384, please advise

[rhermes]

Having a 4215 sensor crash on a signature update is a very common event.

The 4215 sensors only have 512 MB or RAM (most sensors have 1 or 2 GB), this has caused many problems during the update process.

You can try rebooting the sensor several times, if that doesnt bring it back to life, you can try resetting the signature policy back to default, if that doesn't help you'll need to open a TAC case to modify some of the signature build time memory parmeters.

[k.abillama]

The problem is indeed being resolved after rebooting the ips, but this is not a solution for the client since it happened twice in one month!