cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
308
Views
0
Helpful
1
Replies

Problem with IDSUpdate

f.colantoni
Level 1
Level 1

Hello,

we have 5 IDS sensors (4 x 4210 and 1 x 4230).

We scheduled on every sensor to do IDSupdate 2 times at week (monday and thursday at 23:00) and used as FTP server the 4230.

The scheduled update didn't work (neither automatically or manually).

It works only if you (as user Netrangr) shut down the IDS services (nrstop) before the scheduled update happens..

We create the schedule as root user and every ids can do ftp with the 4230 (ftp server).

Every IDS is up to date (3.1(S28)).

Any suggestion?

Daniele Dal Re

1 Reply 1

stleary
Cisco Employee
Cisco Employee

Is the IDM webserver running on the sensors?

If so, you should not use the idsupdate command line tool

to schedule updates.

If you schedule an update from the command line while the webserver

is running, it will be ignored by IDM. Then when the update is attempted

the file will be downloaded but not executed, because the webserver is

running. But the the webserver won't warn users of a pending update

since it is unaware that the update was scheduled.

If the webserver is running, all updates should be scheduled from

IDM Administration.Update page.