Contents
xi
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Duplicate IP Address Shuts Interface Down
E-28
The SensorApp and Alerting
E-29
The SensorApp Is Not Running
E-29
Physical Connectivity, SPAN, or VACL Port Issue
E-31
Unable to See Alerts
E-32
Sensor Not Seeing Packets
E-34
Cleaning Up a Corrupted SensorApp Configuration
E-35
Blocking
E-36
Troubleshooting Blocking
E-36
Verifying ARC is Running
E-37
Verifying ARC Connections are Active
E-38
Device Access Issues
E-40
Verifying the Interfaces and Directions on the Network Device
E-41
Blocking Not Occurring for a Signature
E-42
Verifying the Master Blocking Sensor Configuration
E-43
Logging
E-45
Enabling Debug Logging
E-45
Zone Names
E-49
Directing cidLog Messages to SysLog
E-50
TCP Reset Not Occurring for a Signature
E-51
Software Upgrades
E-52
Upgrading and Analysis Engine
E-52
Which Updates to Apply and Their Prerequisites
E-53
Issues With Automatic Update
E-53
Updating a Sensor with the Update Stored on the Sensor
E-54
Troubleshooting the IDM
E-55
Cannot Launch IDM - Loading Java Applet Failed
E-55
Cannot Launch the IDM-the Analysis Engine Busy
E-56
The IDM, Remote Manager, or Sensing Interfaces Cannot Access the Sensor
E-56
Signatures Not Producing Alerts
E-57
Troubleshooting the IME
E-58
Time Synchronization on the IME and the Sensor
E-58
Not Supported Error Message
E-58
Installation Error
E-59
Troubleshooting the ASA 5500 AIP SSM
E-59
Health and Status Information
E-59
Failover Scenarios
E-61
The ASA 5500 AIP SSM and the Normalizer Engine
E-62
The ASA 5500 AIP SSM and the Data Plane
E-63
