Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
After releasing signature update S749, we discovered a defect that significantly impacted the performance of the AnalysisEngine application running on the sensor. This defect is documented in CSCul00198. Having identified the root cause of the probl...
7.1(6)E4 Service Pack ReleaseThe 7.1(6)E4 service pack reverses the SMB protocol related inspection enhancements delivered as part of 7.1(5)E4 release and also addresses a Signature downgrade issue with SSM platforms.Additionally, as part of this rel...
The question comes up every now and again - when do we (IPS signature team) disable or retire signatures.Remember that there is a difference between disabled and retired. Essentially:Disabled/enabled - turns the written alert off/on.Retired/active - ...
Get the 7.18 upgrade pkg file from here:http://software.cisco.com/download/release.html?mdfid=283674966&flowid=24482&softwareid=282549759&release=7.1(8)E4&relind=AVAILABLE&rellifecycle=&reltype=latestThe readme is available from the same link.In orde...
Do you have a sample alert you can share - strip out anything sensitive (ip's, context data, etc.)... I suspect that you are seeing a summary alert where the port gets zeroed out - in the alert, you'll see that there is indication of "summary" - the ...
Jhun,Your understanding is not correct. The setting relates to platform capacity - not if the platform is experiencing a low memory scenario.Signature load thresholding was added in engine release E4; I'm including a link to the 7.0.2E4 release notes...
How auto-update works is doc'd here:http://www.cisco.com/en/US/products/sw/secursw/ps2113/products_tech_note09186a0080bd008f.shtmlIPS sig updates are cumulative, so if you were to turn auto-update back "on", the most current sig update pack should be...
