I had to open a TAC case because one of our AIP-SSM’s license files was corrupted. The other three AIP-SSMs I was able to fix and one of the suggestions was to use the session command from the firewall which save me a trip out to a remote site to do a reboot manually (like unplug the unit from the FW) so someone posted a note about resetting the IPS 4250 appliances from the console port which would be a good idea to try if you haven’t done so already.
All in all this issue cost me a couple of days of productive work. And I agree that the guys from Cisco on this page pretty much came across as blaming us as end users for not upgrading to the latest code. I mean we were a couple of revs back on 7.02 (e4) still in the same train of code; so I thought those comments were completely inappropriate especially since there was no prior warning or major service bulletin on the security bulletin that is emailed out; like the one I just received on S603 a few minutes ago. In other words, that is how you need to warn customers about major code bugs like this … that guy was acting like a corporate parrot, puppet and tool for blaming the customers. I know he pissed off a lot of customers.
