ASA-SSM-10 Signature Update Errors Messages
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-21-2012 01:24 PM - edited 03-10-2019 05:42 AM
Hello,
I am getting error messages on ASA-SSM-10 IPS. It has following configuration:
Model: ASA-SSM-10
Hardware version: 1.0
Firmware version: 1.0(11)5
Software version: 7.0(7)E4
App. version: 7.0(7)E4
Here are error messages:
evError: eventId=1334244240891143986 vendor=Cisco severity=error
originator:
hostId: sensor
appName: mainApp
appInstanceId: 357
errorMessage: No installable auto update package found on server name=errSystemError
evError: eventId=1334244240891141857 vendor=Cisco severity=error
originator:
hostId: sensor
appName: mainApp
appInstanceId: 357
errorMessage: could not parse cisco-locator-server response name=errSystemError
evError: eventId=1334244240891142089 vendor=Cisco severity=error
originator:
hostId: sensor
appName: collaborationApp
appInstanceId: 489
errorMessage: A global correlation update failed: Receive HTTP response failed [3,212]
Messages, like this one, in the category - Reputation update failure - were logged 1 times in the last 105245 seconds. name=errUnclassified
evError: eventId=1334244240891141325 vendor=Cisco severity=error
originator:
hostId: sensor
appName: mainApp
appInstanceId: 357
errorMessage: could not parse cisco-locator-server response name=errSystemError
Actually IPS is doing signature and Global Correlation updates, but form time to time I see these error messages. Do you have any information what could it indicate.
- Labels:
-
IPS and IDS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-10-2012 12:13 AM
Hello Giorgi,
Sometimes it may be server saturation, other connection problems proxy and so on. I recommend you to not put the hour for auto update to an exact time ie 2:00 PM or 1:00 AM try putting not even numbers like 9:17 or 10:41, and see if you continue getting these errors.
Mike
