ASA IPS SSM 10

[cisartomas]

Hello,

we had two ASA with IPS SSM 10 sw 7.1.6. Automatic signature update failed. (Last attempt was more than 70 days). I tried to update IPS manually (sometimes it hapenned) . From IME (7.2.3) I saw warning message: 

I tried update from CLI = same result.

I tried to use upgrade package of 7.1.7 first = same result

We made recovery of both sensors to version 7.1.7. Then I tried to apply latest signature image. I have (S698 and new one 702). Both updates have same result = same error message...

Do you have any experience with similar problem ? We completelly recovered IPS sensor and result is same... It's very strange.

Thomas

[jocamare]

Sounds like you are using the right file but the wrong method to upload it.

How do you do it?

[cisartomas]

its sounds :-)

I tried classical steps: cli:  upgrade ftp:/ip_address/name of the package

or from IME :

configuration/sensor management/update sensor

[jocamare]

Can you try to download the signature file again from Cisco and check its MD5 checksum?

What happens when you set it to "auto-update"?

[cisartomas]

I tried to download package many times... I will check the MD5. But can the download fail many times ?

auto-update looks normally. (once per week is regular update). IPS just tried to download package, no error message. But signature version is still same. This output is from secondary IPS:

regular global corelation works well: