Guest

Preview Tool

Cisco Bug: CSCum25362 - IPS: Failover occurs during an IPS config change

Last Modified

Feb 23, 2018

Products (17)

  • Cisco IPS 4200 Series Sensors
  • Cisco IPS 4255 Sensor
  • Cisco IPS 4260 Sensor
  • Cisco ASA 5555-X IPS Security Services Processor
  • Cisco IPS 4270-20 Sensor
  • Cisco IPS 4345 Sensor
  • Cisco IPS 4520 Sensor
  • Cisco IPS 4240 Sensor
  • Cisco ASA 5525-X IPS Security Services Processor
  • Cisco IPS 4510 Sensor
View all products in Bug Search Tool Login Required

Known Affected Releases

7.1(7)E4

Description (partial)

Symptom:
A data-plane failover occurs with no indications of an IPS failure or issue in the IPS logs.  The ASA show failover command shows:

   01:29:37 UTC Nov 10 2013
   Standby Ready              Failed                     Detect service card failure

Conditions:
This bug occurs during an IPS configuration change (signature update, signature tuning, GlobalCorrelation update).   In one instance the following IPS main.log warning occurred:

10Nov2013 01:33:24.334 22939.959 interface[1833] intfc/W AnalysisEngine is temporarily unresponsive to user queries, may be busy with Initialization or Signature Compilation or Global Correlation Update

NOTE: The above log occurs each day about 1:30 UTC (daily full GC update) and is a normal warning.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.