CSM 3.3.0 - IPS signature update

[peter-marcek]

Hi all,

we have csm v 3.3.0 in our company and till december 2010 we have problem with IPS signature upgrades. When I try to download new signature updates, csm claim that connection to update server is successfull but last version which csm offer is IPS-CS-MGR-sig-S534-req-E4.zip (actual version is IPS-CS-MGR-sig-S549-req-E4.zip)  - see attachement.

License for CSM is Professional. Any idea? please help

[Siddharth Chandrachud]

Hi Peter,

You might not be running the latest service pack for version 3.3.0.

Cisco Security Manager (CSM) customers subscribing  to automatic IPS signatures/sensors are required to download and  install a Cisco Security Manager Service Pack after December 23, 2010  as the IPS signatures are migrating to a new download location on CCO.

Hence if you are running 3.3.0 then you need to upgrade to 3.3.0 SP2 (Service pack 2)

There was a field notice out on this issue:

http://www.cisco.com/en/US/partner/ts/fn/633/fn63373.html

CSM downloads can be found here:

http://tools.cisco.com/squish/72697

Hope this helps,

Sid Chandrachud

Cisco TAC - Security team

[peter-marcek]

Hi Sid,

thank you for your response.

I apply the 3.3.0 service pack 2, but now I cannot log to the server from client (see attachement).

I try to restart CSM deamon service several times but doesnt help.

When i try to conect directly to server through http://CSM_IPaddress:1741 and type username and password I got this message:

Forbidden

You don't have permission to access /cwhp/LiaisonServlet on  this server.

Additionally, a 403 Forbidden error was encountered while trying to use an  ErrorDocument to handle the request.

[peter-marcek]

For additional information:

I try steps from link http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCso59571

but doesnt solve this problem

Plus I try Start --> My Computer --> Local Disk (C:) --> Program Files  --> CSCOpx --> setup --> support --> and execute the  resetCasuser.exe

but still no success.

Please help

[Siddharth Chandrachud]

Hi Peter,  403 Forbidden error is a generic error and can be caused by a lot of things, services not starting correctly, permissions, apache/tomcat errors etc. So if you have already tried restarting the Cisco Security Manager Daemon manager and resetting casuser then I would suggest opening a TAC case to have a TAC engineer have a closer look.  Regards, Sid