Signature Update 2.3.3i S10

[rossr]

I have updated my CSPM install and my sensors to the latest signature revision. Unfortunately, now CSPM is telling me that 3.0(2)S10 is not a supported version? Any idea what's going on? I know the same thing happened with 2.3.2i and 3.0(2)S9. What can I do (if anything) to fix this?

Thanks.

[marcabal]

It is an issue with CSPM and not the signature update itself.

It has a software bug that didn't acknowledge Service Pack levels higher than 1.

So when we revved up to 3.0(2)S9 the Service Pack level in parethesis changed from 1 to 2, and brought up this CSPM bug.

I don't know if it has been fixed in v2.3.3i of CSPM. If not then you will continue to receive this error for all new signature udpates and have to just ignore it.

From the S9 readme for CSPM:

CAVEATS

After installing the S9 signature update, you may see the following warning

message while trying to add a sensor that has been updated to 3.0(2)S9.

"Specified IDS Sensor Version 3.0(2)S9 is not an exact match to a supported

version. All features may not be supported."

This warning message can safely be ignored. CSPM will function properly

with a 3.0(2)S9 sensor.

[ishah]

Hi,

Is there any way of doing the signature updates automatically to the CSPM Server ? ala autoupdate on the Sensors.

Inti.

[mbilal]

I have received the message,

"Specified IDS Sensor Version 3.0(2)S10 is not an exact match to a supported

version. All features may not be supported."

How do you send the configuration to the sensor, because I can no longer use the "Approve Now" button to send the configs to the sensor?

Side Note: I can select every tab in the sensor window, but when I select the "Blocking" tab my application crashes and I receive a Dr. Watson error for cfmi.exe. Have you experienced this strange problem?

[teperjesi]

I've noticed the same problem whit the "Approve Now" button. I had to reinstall my CSPM. I guess, it will cure your cfmi.exe issue too.

[marcabal]

I wasn't aware of any problem with the Approve Now button.

The thing to keep in mind is that when the WARNING shows the Approve Button may not be selectable.

This is because the "Pending Commands" radial button has to be selected to push the Approve Button.

But the WARNING message shows up when another option is selected "Generation Status" if I remember correctly.

NOTE: The message about the version is just a WARNING and not an ERROR. It is just letting you know that new features in 3.0(2) aren't configurable in CSPM so only 3.0(1) features will be configured in the configuration files. Of course, this time around only bug fixes and no features were added in 3.0(2) so you can ignore the WARNING.

I also hadn't heard of any problem with the Device Management windows crashing. Have you called the TAC on that issue? I would recommend contacting the TAC if you haven't yet.