Snort Auto Updates on FMC

[buffkata]

Hi, 

I noticed something strange and wanted to share with the community and see if this someone has some info about this behavior. 

We have a daily Snort Rule Update set on the FMC ( probably not the best option - now I am thinking that weekly would be better). 

This auto update just updates the Snort Rules but doesn't deploy them to the config - I do this manually with regular changes ( a few times a week). 

This week I noticed this in the Rule Update Log and this is something new that I cannot explain. It looks like the second weekly update failed to install ( 8-26) with this error message :

2022-08-30 02:00:16

/var/sf/SRU/Cisco_Firepower_SRU-2022-08-23-001-vrt.sh.REL.tar

SRU Import

error

Version mismatch

Does anyone has more info - or have seen this before ? 

[jds5]

Hello,

I'm reviving this topic because I'm facing the same issue.

The problem is that the automatic policy deployment is no longer working. 

Snort rules fail to install.

It's a FMC 1000 in version 6.4.0.14 b67

Has anyone already faced this problem?

BR,

[jds5]

Hi, 

I'd like to ask you again,
Would you know of this problem, which seems to be recurrent, the problem of updating the snort database?