cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
475
Views
0
Helpful
1
Replies

Unable to deploy sig on 5.x via VMS MC 2.3

melangnghe
Level 1
Level 1

After disabling a signature, the job to deploy the change returns with the following error message in VMS MC 2.3 . Please advise how to fix this problem.

Sensor1: Deploy

Starting to Deploy...

An EditConfigDelta request sent for all the changed components.

** ECD result for analysisEngine: no error.

** ECD result for eventActionRules: no error.

** ECD result for signatureDefinition: Error parseError:/-- Error while adding <http://www.cisco.com/cids/idconf:var> at line: 1, at character: 290.

Sensor has excepted all/some current config.

1 Reply 1

wong34539
Level 6
Level 6

Creating a custom signature for a 5.x IPS device where that signature's engine allows the user to specify a regex expression can cause errors during deployment of the configuration to the device if the user specifies either a '.' (i.e., period character) or a ',' (i.e., comma character) in the regex expression.

http://www.cisco.com/en/US/products/sw/cscowork/ps3990/prod_release_note09186a00804c2a3f.html

Review Cisco Networking for a $25 gift card