Intrusion policy, Policy out-of-date on device

[dm]

Hello!

I use ASDM to manage Firepower on ASA 5506-X.

I just found that  in  Configuration > ASA FirePOWER Configuration > Policies > Intrusion Policy > Intrusion Policy

my policy is always shown as Policy out-of-date on device.

I tried to change it, to change access control policy in which it is in use, did deploy- there is no changes,

it is always Policy out-of-date on device.

Could you tell me how to solve this?

Currently running software version: 6.2.3.10

Thank you!

[dm]

btw, upgraded to 11, no changes.

[johnlloyd_13]

hi,

did you click 'Click Store ASA FirePOWER Changes' at the bottom?

[dm]

I have this problem on 3 devices, nothing helps...

[gregghudson]

I have this exact same problem. Nothing clears the error. I go into the IPS and click "Commit Changes", go to Access Control Policy (and it says 'Up-to-date') and click "Store ASA FirePOWER Changes",  then "Save Running Configuration to Flash" and even after 'deploy' it still show's "Out-of-date". And this is on 5 different firewalls!

[Netman-1]

I'm seeing this exact same problem as well.

[matthew.campbell]

Has anyone found a solution to this issue?  

[Marvin Rhoads]

It could be caused by a corrupted entry with the database.

I recommend opening a TAC case to get into the level of troubleshooting that necessary to confirm and remedy the issue.

[dm]

I don't think there is any corruption here but software bug :-)

[Marvin Rhoads]

Bugs can cause database corruption. :)

[gregghudson]

Cisco TAC says "known bug".

[matthew.campbell]

Did they supply a bug number?

[gregghudson]

CSCvp60741

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp60741/?reffering_site=dumpcr

[Imma]

File -> Deploy Firepower changes

https://community.cisco.com/t5/network-security/asa-with-firepower-services-url-filtering-blocks-nothing/m-p/3366475#M963376