When using IDS MC to pull a IDS Sensor Versions Report, it shows that my

[rowleyt]

one sensor is running version 4.1(3)S61. When I do a "show version" however on the Sensor CLI or when I do a Query Sensor from the IDS MC (Configuration -> Settings -> Identification) it shows the sensor is running 4.1(1)S47.. What is happening? Which one is correct? Why are they different?

Also, when I click "apply" after doing the "query sensor" it fails saying that "Object update failed. The sensor version 4.1(1)S47 is an unrecognized version. You may need to apply a signature update to the system for support of this sensor."

I try and apply a signature update and it seems to take, but when I do a show version from the CLI it does not show any sig update. How can I fix this? Where can I check for the Signature database version using IDS MC? Any help with all this would be great! I am confused.. Thanks.

Tom

[umedryk]

Assuming a few things, what you need to verify first, is that you have the latest updates for your IDS MC server. If you want to support the IDS 4.1 sensors you should have applied the VMS 2.2 Update 1 and be running the latest 1.2.3 version of IDSMC. If you haven't, the updates can be found here:

The VMS Update can be found here: http://www.cisco.com/cgi-bin/tablebuild.pl/vms-3des

Please note in the install instructions when a reboot is required before proceeding with the next component installation. Also make sure that Terminal Services is not installed on the server when applying the update or installing the components. The IDSMC application updates and patches can be found here: http://www.cisco.com/cgi-bin/tablebuild.pl/mgmt-ctr-ids-app