Cannot deploy updated signatures on IPS vs1

[Todd Anderson]

Hi,

I'm trying to submit and deploy updated config info to my IPS device.  I have two virtual sensors, vs0 and vs1.  I am getting a deployment failure trying to update vs1 with the following info:

Failed to generate edit config delta  for analysisEngine component. Detail: Error encountered while converting IpsVirtualSensor to current config
Detail: Fail to generate virtual sensor current config.
Detail: Virtual sensor vs1 change might not be submitted or approved in the activity in workflow mode.

I don't see that vs1 is in workflow mode.  Is there anything I can double-check as to why I'm getting this error?

Thanks

[Christopher Dreier]

Hello Todd,

This message is the result of CSM's inability to commit the configuration. There are several causes for this that we'll need to investigate.

This issue is probably best resolved via a TAC case if you have means to open one.

We first need to answer a few preliminary questions:

What version of CSM are you running?

What version of code is the IPS running?

- Please include System, Engine, and Signature versions.

Are you in workflow mode?

Are you authenticating via ACS or doing local authentication?

We will also need a CSMDiagnostics.zip.

Tools -> Security Manager Diagnostics

Thank you,
Blayne Dreier
Cisco TAC IDS Team

**Please check out our Podcast**
TAC Security Show: http://www.cisco.com/go/tacsecuritypodcast

[Todd Anderson]

Hi Blaine,

This is George Nussbaum, Todd's associate.  I opened the ticket.  I will open a TAC case as you advised.

Regards,

George