Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

IPS signature update

I would like to ask if cisco already resolved the issue that if an signature, major/minor update is applied to ids sensor the configuration of sensor is reset to its default value.

This is happening to my ids4250 sensor.

4 REPLIES
Bronze

Re: IPS signature update

check this bug-id:CSCeh86998

Community Member

Re: IPS signature update

The version of my sensor is 5.1(x). Is this version still affected by the BUG?

Bronze

Re: IPS signature update

The bug-id referenced above is a 4.1 only bug and not related to 5.1. It is possible that you are running into CSCsd33883 which is a loss of config on upgrade to 5.1(1). We've only ever seen it happen on the IDSM2, but it is possible to happen on the appliances (i.e. there is no code specific to the IDSM2). To the best of our knowledge and testing, you should not lose your tunings on service packs in the 5.1(x) train. If you are experiencing this trouble, please open a TAC case and they will get the information to the Dev team.

Silver

Re: IPS signature update

We are having an issue that if a signature update includes new fields to an engine our custom signatures lose all of their settings. I'm not sure if this is what you are referring to.

176
Views
0
Helpful
4
Replies
CreatePlease to create content