IPS events

[jignesh.darji]

Hi All,

I am Manage and Monitoring cisco IPS, problem is that daily one time for exact time near around 7:00 morning IPS utilization goes high and agina come down. IPS model is 4255. any idea what are possible cause. IPS deployement in promoscious mode. Is there any bugs in it? or else reason? cause my connected swithch does not see traffic utilization!!   confuse yar..

Jignesh

[Jennifer Halim]

What version of IPS are you currently running on your IPS?

Is there anything specific that happens at 7 in the morning? did you schedule the signature update at that time?

[jignesh.darji]

Hi,

Nope i don't have any sechudele for sig update. it is IPS 6.1 Soft and Hardware 4255

any idea why it is and now it see me some hike with random time also but just for 1min or 2min

any idea????

[Christopher Dreier]

Hello Jignesh,

When you say that "IPS utilization goes high," what exactly do you mean? Does the CPU usage increase or does the Inspection Load increase?

Thank you,

Blayne Dreier

Cisco TAC Escalation Team

**Please check out our Podcasts**

TAC Security Show: http://www.cisco.com/go/tacsecuritypodcast

TAC IPS Media Series: https://supportforums.cisco.com/docs/DOC-12758