Max user reached via https (IPS 4260)

[msamoilov]

If I try to connect via https writes that max user reached . Rebooting did not help.  May be  delete some signatures and configured full-100 inspection interface?

[rhermes]

This is an unusual problem. Do you have a lot of devices connecting to this sensor to pull events?

The default number of https sessions was something around 5. You can increase that if you are really hitting that limit.

ssh into your sensor and run a "show user" command to see what is connecting to your sensor.

Deleting signatures or changing the sensing interface configuration will not change this problem.

- Bob

[msamoilov]

Hi, Bob.

I haven't any https sessions to my IPS 4260 when i run show user in CLI.

[rhermes · Accepted solution]

Mike -

I see you are running version 7.0(4) and signature release 601.

This is a bad combination and can cause your sensor to lock up. You will need to upgrade your OS to 7.0(6) then apply the latest Signature pack (you have 30 days after that license expires, so hurry).

This may solve your problem, but even if it doesn;t you need to do this anyway.

Here is the thread discussing the os/sig version problem:

https://supportforums.cisco.com/thread/2109620?tstart=0

- Bob