topic Hi Arjun, in Network Security

IPS Signature Auto update

junajunction — Sun, 10 Mar 2019 13:33:54 GMT

Hi Guys,

I am facing an issue with IPS, where the IPS is not doing an auto update with the cisco url provided below, We are running IPS ASA-SSM-20 with the version 7.1(7)E4.

Auto Update Statistics
   lastDirectoryReadAttempt = 10:36:01 GMT+03:00 Tue Feb 23 2016
    =   Read directory: https://72.163.4.161//cgi-bin/front.x/ida/locator/locator.pl
    =   Error: AutoUpdate exception: HTTP connection failed [1,0]
   lastDownloadAttempt = N/A
   lastInstallAttempt = N/A
   nextAttempt = 11:36:00 GMT+03:00 Tue Feb 23 2016

Ping works fine. and nat is done to the internet.

ping 72.163.4.161
PING 72.163.4.161 (72.163.4.161): 56 data bytes
64 bytes from 72.163.4.161: seq=0 ttl=237 time=262.960 ms
64 bytes from 72.163.4.161: seq=1 ttl=237 time=255.961 ms
64 bytes from 72.163.4.161: seq=2 ttl=237 time=247.963 ms
64 bytes from 72.163.4.161: seq=3 ttl=237 time=273.958 ms

Pls help

Thank you,

Arjun

Hi Arjun,

pschwalger — Mon, 07 Mar 2016 02:48:51 GMT

Hi Arjun,

Did you manage to solve this issue?

I have a similar problem and am running IPS Version: 7.1(8p2)E4 which was working fine and then failed about 8 weeks ago and I have been subsequently updating the signatures manually.

My error message is slightly different

Auto Update Statistics
lastDirectoryReadAttempt = 15:41:04 GMT+12:00 Mon Mar 07 2016
= Read directory: https://72.163.4.161//cgi-bin/front.x/ida/locator/locator.pl
= Error: AutoUpdate exception: TLS connection failed setup [4,0]
lastDownloadAttempt = 15:00:19 GMT+12:00 Sat Feb 13 2016
lastInstallAttempt = 12:02:41 GMT+12:00 Wed Dec 30 2015

regards, Peter.

I think I found the problem..

pschwalger — Mon, 07 Mar 2016 03:13:18 GMT

I think I found the problem...

http://www.cisco.com/c/en/us/support/docs/field-notices/640/fn64080.html

It looks like i will need to upgrade to version 7.1(11)E4 or later

Yep did the same and its

junajunction — Fri, 11 Mar 2016 14:19:43 GMT

Yep did the same and its working now.

Thank you Pschwalger.

Regards,

Arjun T P