cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
269
Views
0
Helpful
1
Replies

Unable to set some Signatures back to IDS 4 Default.

paulcian_2
Level 1
Level 1

I am in the process of performing the upgrade on the 4210 from 4.x to 5.x. When trying to set the signature back to the IDS 4 defaults the "param src" field still shows the Sensor rather then IDS 4 Defaults. The "prop src" shows the "IDS 4 defaults". I was able to perform the same process for other signatures which seem to work for those but these few I cannot change back and the upgrade continuously fails since the are not back to the defaults.

Any Ideas?

1 Accepted Solution

Accepted Solutions

rhermes
Level 7
Level 7

These are the CLI commands for resetting 4.x signatures back to default:

reset signatures

conf t

service virtual-sensor-configuration virtualSensor

tune-micro-engines

reset-signatures

Don't forget about any custom sigs you have on your sensor. Some convert to 5.x ok, others need to be removed.

View solution in original post

1 Reply 1

rhermes
Level 7
Level 7

These are the CLI commands for resetting 4.x signatures back to default:

reset signatures

conf t

service virtual-sensor-configuration virtualSensor

tune-micro-engines

reset-signatures

Don't forget about any custom sigs you have on your sensor. Some convert to 5.x ok, others need to be removed.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: