IDS Sensor Signature Update Failure.

[dasgill]

IDS signature update not working on IDS-4215 via Ciscoworks VMS. IDS-4215 Cisco systems IDS version 4.1(4)S91. Trying to deploy signature update IDS-sig-4.1-4-S162.zip.

The following error is been noted in the audit report:

"Sensor update for LDS_SENSOR failed.The current version 4.1(4)S91 did not match the applied version 4.1(4)S162 after update"

I was under the impression that IDS signature updates are not cumulative.

[irelandsky]

1) Did you update your VMS system correctly? Verify that IDS MC is update to S162 sig.

2) Try to update IDS sensor sig by CLI with upgrade command; my collegues told me that sometimes signature update performed by VMS doesn't work.

Let me know

Marco

[dasgill]

I have tried the update using the upgrade CLI commond to no avail. I get the following message:

Broadcast message from root (Fri May 6 10:27:35 2005):

Error when attempting to install /usr/cids/idsRoot/var/updates/IDS-sig-4.1-4-S162.rpm.

Error: error: Error when attempting to install /usr/cids/idsRoot/var/updates/IDS-sig-4.1-4-S162.rpm.

Are these updates cummulative ? Do I need to install the previous updates first?

Kind regards

Donald

[irelandsky]

Donald,

1) what is your current IDS sig on your sensor? You can see it by show version command.

In order to install S162 you must have installad Service pack S91. If you don't have it you must install it before S162 SIG.

I suggest you, before attempt to upgrade signature, to read the readme file where you could find all info about the upgrade process for that signature.

2) All upgrade sig. are cumulative

Hope this help

Marco