cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
459
Views
0
Helpful
3
Replies

IPS signature update not showing up in Event Management

Beat.Traber
Level 1
Level 1

Hi,

Last week, signature update S381 was imported in our Mars 6.0.2(3102)

Of this update S381 some events show up in the event-management list while others don't. E.g. event-id 1950377 is visible, whereas event-id 1950378 or 1950382 (CVE-2009-0075) aren't. What's wrong?

3 Replies 3

Beat.Traber
Level 1
Level 1

Update S382 didn't change a thing. Event-ID have been inserted, but ID 1950378 or 1950382 are still not visible. CVE-2009-0075 does not show when using a query. In fact, none of the CVE-2009- does show. Any ideas? Something wrong with the XML-File?

No change with downloading S383. Several Events are still omitted.

If you open 381.edu.inc.xml in your webbrowser it says explicitely that there is an error in the file.

Anybody from Cisco reading this? And perhaps even able to fix it?

Still no change with S384 and S385

Anybody reading this?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: