Cisco ASA5585-SSP-IPS60 Global Correlation - Status CRITICAL
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-15-2016 10:52 PM - edited 03-10-2019 06:43 AM
Please help I am facing problem configuring Global Correlation every time it is showing that the status is CRITICAL and it is not turning Green and I am using Cisco IPS Manager Express 7.2.7.
Product : ASA5585-SSP-IPS60
Cisco Intrusion Prevention System, Version 7.3(5)E4
Please help me asap.
THANKS,
HRIDOY
- Labels:
-
IPS and IDS
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-17-2016 03:54 PM
You have a version newer than the required 7.3(4)E4 which is necessary to trust Cisco's new SHA-2 signed certificates; so that's OK.
(Reference: http://www.cisco.com/c/en/us/support/docs/field-notices/640/fn64080.html )
Is your IPS able to reach the internet for things like signature updates?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-23-2016 06:42 PM
Also note - you were probably hitting the issue where Cisco issued new certificates on their servers used for Global Correlation last week. If you "edit" the alert in IME and then just click "OK", IME will prompt you to accept the new certificate. After you do that, the status should change to OK within a minute or less.
