Guest

Preview Tool

Cisco Bug: CSCur19928 - CX NGIPS - Updater Fails to Apply Signature Updates & Causes Outage

Last Modified

Apr 07, 2017

Products (1)

  • Cisco ASA Next-Generation Firewall Services

Known Affected Releases

9.2(1.3.12) 9.3(1.1.112)

Description (partial)

Symptom:
The CX fails to apply a signature update which causes the Next Generation Intrusion Prevention (NGIPS) scans to hang and results in an HTTP traffic outage for traffic passing through the CX module.  This does not trigger an ASA failover since all CX health checks continue to pass from the perspective of the ASA

Conditions:
1.  Must have the NGIPS feature enabled with traffic passing through the CX module
2.  Must have automatic updates enabled
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.