Guest

Preview Tool

Cisco Bug: CSCut14740 - AC policy with SI "Suspicious" category: snort fatal error

Last Modified

Oct 12, 2017

Products (1)

  • Cisco Firepower Management Center

Known Affected Releases

6.0.0

Description (partial)

Symptom:
"Primary Detection Engine exited x times" health alerts for a firepower sensor / module

/var/log/messages fatal error messages during snort validation like the following (the object uuid may be different):

snort[25294]: FATAL ERROR: Unable to open address file /var/sf/iprep_download/2CCDA18E-DDFF-4F5C-AF9A-F009852183F4.blf, Error: No such file or directory

Conditions:
AC policy with security Intelligence blacklist categories enabled
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.