12-19-2016 03:10 AM - edited 03-10-2019 06:44 AM
Dears,
I have an IPS (AIP-SSM-10) that is installed on a 5520 FW, The problem is that it does not download the latest update automatically via the cisco.com auto update.
And when i tried to troubleshoot, The message was:
Success: sensor is already running the latest signature update version.
But on the cisco.com website there is a newer version of the signature.
Any idea about this?
Solved! Go to Solution.
01-05-2017 08:31 AM
This is because IPS signature services is already end of life after 16th Sep 2016.
http://www.cisco.com/c/en/us/about/security-center/eol-ips.html
12-21-2016 08:51 PM
What is the IPS version? Please check if the signature version is compatible with IPS software.
Thanks
01-05-2017 06:31 AM
The version is 7.1.11(E4), it is an SSM-10 module on ASA,
I have also tried to generate certificates from 72.163.4.161 and 72.163.7.60 and it did not resolve the issue.
we are still having the same message and the sig is 955.
01-05-2017 08:31 AM
This is because IPS signature services is already end of life after 16th Sep 2016.
http://www.cisco.com/c/en/us/about/security-center/eol-ips.html
01-09-2017 05:50 AM
Thank you for your help
12-22-2016 06:13 AM
Try to add the new Cisco certificates to your trusted root certificate store. Follow the below link
http://www.cisco.com/c/en/us/support/docs/security/ips-sensor-software-v...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide