Unable to set some Signatures back to IDS 4 Default.

[paulcian_2]

I am in the process of performing the upgrade on the 4210 from 4.x to 5.x. When trying to set the signature back to the IDS 4 defaults the "param src" field still shows the Sensor rather then IDS 4 Defaults. The "prop src" shows the "IDS 4 defaults". I was able to perform the same process for other signatures which seem to work for those but these few I cannot change back and the upgrade continuously fails since the are not back to the defaults.

Any Ideas?

[rhermes · Accepted solution]

These are the CLI commands for resetting 4.x signatures back to default:

reset signatures

conf t

service virtual-sensor-configuration virtualSensor

tune-micro-engines

reset-signatures

Don't forget about any custom sigs you have on your sensor. Some convert to 5.x ok, others need to be removed.