Seems latest VRT update broke Firepower this morning in my home lab. ASA 5506-X. Unable to install policies and syslog shows:
Mar 02 2016 04:16:05 firepower snort[9939]: FATAL ERROR: The dynamic detection library "/var/sf/detection_engines/*GUID*/so_rules/protocol-scada.so" version 1.0 compiled with dynamic engine library version 2.5 isn't compatible with the current dynamic engine library "/var/sf/detection_engines/*GUID*/libsf_engine.so" version 2.4.
Seems /var/cisco/deploy/pkg/var/cisco/packages/modules-1910-x86_64/so_rules installed by update has incompatible libraries...
Managed to fix the issue by logging into console/ssh and doing:
sudo bash
cd /var/sf/detection_engines/*GUID*
mv so_rules so_rules.old
ln -s /var/cisco/deploy/pkg/var/cisco/packages/modules-1908-x86_64/so_rules so_rules
Replace *GUID* above with the unique id on your system.
And then push policies. URL filtering needed a restart of the module to start working again.
Not sure this is a recommended fix, but a good thing this is only a lab.
Has this happened to anyone else here ?
