Cisco IPS auto Update failure

[Ma'moun Mohammad shanableh]

Dears,

I have an IPS (AIP-SSM-10) that is installed on a 5520 FW, The problem is that it does not download the latest update automatically via the cisco.com auto update.

And when i tried to troubleshoot, The message was: 

Success: sensor is already running the latest signature update version.

But on the cisco.com website there is a newer version of the signature.

Any idea about this?

[Pranay Prasoon]

What is the IPS version? Please check if the signature version is compatible with IPS software.

Thanks

[Ma'moun Mohammad shanableh]

The version is 7.1.11(E4), it is an SSM-10 module on ASA,

I have also tried to generate certificates from 72.163.4.161 and 72.163.7.60 and it did not resolve the issue.

we are still having the same message and the sig is 955.

[Pranay Prasoon · Accepted solution]

This is because IPS signature services is already end of life after 16th Sep 2016.

http://www.cisco.com/c/en/us/about/security-center/eol-ips.html

[Ma'moun Mohammad shanableh]

Thank you for your help

[Ravi Singh]

Try to add the new Cisco certificates to your trusted root certificate store. Follow the below link

http://www.cisco.com/c/en/us/support/docs/security/ips-sensor-software-v...