topic Re: Cannot deploy updated signatures on IPS vs1 in Network Security

Cannot deploy updated signatures on IPS vs1

Todd Anderson — Sun, 10 Mar 2019 12:04:36 GMT

Hi,

I'm trying to submit and deploy updated config info to my IPS device. I have two virtual sensors, vs0 and vs1. I am getting a deployment failure trying to update vs1 with the following info:

Failed to generate edit config delta for analysisEngine component. Detail: Error encountered while converting IpsVirtualSensor to current config
Detail: Fail to generate virtual sensor current config.
Detail: Virtual sensor vs1 change might not be submitted or approved in the activity in workflow mode.

I don't see that vs1 is in workflow mode. Is there anything I can double-check as to why I'm getting this error?

Thanks

Re: Cannot deploy updated signatures on IPS vs1

Christopher Dreier — Tue, 03 Aug 2010 15:41:50 GMT

Hello Todd,

This message is the result of CSM's inability to commit the configuration. There are several causes for this that we'll need to investigate.

This issue is probably best resolved via a TAC case if you have means to open one.

We first need to answer a few preliminary questions:

What version of CSM are you running?

What version of code is the IPS running?

- Please include System, Engine, and Signature versions.

Are you in workflow mode?

Are you authenticating via ACS or doing local authentication?

We will also need a CSMDiagnostics.zip.

Tools -> Security Manager Diagnostics

Thank you,
Blayne Dreier
Cisco TAC IDS Team

**Please check out our Podcast**
TAC Security Show: http://www.cisco.com/go/tacsecuritypodcast

Re: Cannot deploy updated signatures on IPS vs1

Todd Anderson — Mon, 09 Aug 2010 14:13:54 GMT

Hi Blaine,

This is George Nussbaum, Todd's associate. I opened the ticket. I will open a TAC case as you advised.

Regards,

George