topic Re: Upgrading Engine Version on IPS 4240 in Network Security https://community.cisco.com/t5/network-security/upgrading-engine-version-on-ips-4240/m-p/1532111#M66069 <HTML><HEAD></HEAD><BODY><P>Hi Kiran,</P><P>&nbsp;&nbsp;&nbsp; You'll need to update the engine either way since you cannot use the latest signature definitions without being on the latest engine.&nbsp; As long as you're not seeing dropped packets at the sensing interface level, it's fine for the CPU utilization to be that high.&nbsp; If you begin to see discarded packets you'll need to either reduce the amount of traffic being sent to the sensor or reduce (by disabling and retiring) the number of signatures inspecting traffic on the sensor. </P><P></P><P>Best Regards,</P><P>Justin</P></BODY></HTML> Mon, 29 Nov 2010 13:48:36 GMT Justin Teixeira 2010-11-29T13:48:36Z Upgrading Engine Version on IPS 4240 https://community.cisco.com/t5/network-security/upgrading-engine-version-on-ips-4240/m-p/1532110#M66068 <P>Hi,</P><P></P><P>&nbsp; I am running an IPS 4240 Sensor with Engine Version <STRONG><SPAN>7.0(1) E3</SPAN></STRONG><SPAN> and the Sensor always<STRONG> </STRONG>has a high load of 97-98%. Is it recommended to update the sensor to the latest engine version, considering the amount of load on it right now?</SPAN></P><P></P><P>Thanks</P><P>Kiran</P> Sun, 10 Mar 2019 12:11:39 GMT https://community.cisco.com/t5/network-security/upgrading-engine-version-on-ips-4240/m-p/1532110#M66068 kiran.raj1 2019-03-10T12:11:39Z Re: Upgrading Engine Version on IPS 4240 https://community.cisco.com/t5/network-security/upgrading-engine-version-on-ips-4240/m-p/1532111#M66069 <HTML><HEAD></HEAD><BODY><P>Hi Kiran,</P><P>&nbsp;&nbsp;&nbsp; You'll need to update the engine either way since you cannot use the latest signature definitions without being on the latest engine.&nbsp; As long as you're not seeing dropped packets at the sensing interface level, it's fine for the CPU utilization to be that high.&nbsp; If you begin to see discarded packets you'll need to either reduce the amount of traffic being sent to the sensor or reduce (by disabling and retiring) the number of signatures inspecting traffic on the sensor. </P><P></P><P>Best Regards,</P><P>Justin</P></BODY></HTML> Mon, 29 Nov 2010 13:48:36 GMT https://community.cisco.com/t5/network-security/upgrading-engine-version-on-ips-4240/m-p/1532111#M66069 Justin Teixeira 2010-11-29T13:48:36Z