Cisco Systems IPS4520K9 Network Router User Manual


 
E-19
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Analysis Engine Not Responding
You must have a valid IPS license to allow global correlation features to function.
Global correlation features only contain external IP addresses, so if you position a sensor in an
internal lab, you may never receive global correlation information.
Make sure your sensor supports the global correlation features.
Make sure your IPS version supports the global correlation features.
Note
The global correlation features are supported in IPS 7.0 and later.
For More Information
For detailed information about Global Correlation features and how to configure them, for IDM
refer to Configuring Global Correlation, for IME refer to Configuring Global Correlation, and for
the CLI refer to Configuring Global Correlation.
For the procedure for adding a DNS server to support Global Correlation, for IDM refer to
Configuring Network Settings, for IME refer to Configuring Network Settings, and for the CLI,
refer to Configuring the DNS and Proxy Servers for Global Correlation.
For the procedure for obtaining and installing the IPS license key, for IDM refer to Configuring
Licensing, for IME refer to Configuring Licensing, and for the CLI, refer to Installing the License
Key.
Analysis Engine Not Responding
Error Message Output from show statistics analysis-engine
Error: getAnalysisEngineStatistics : ct-sensorApp.424 not responding, please
check system processes - The connect to the specified Io::ClientPipe failed.
Error Message Output from show statistics anomaly-detection
Error: getAnomalyDetectionStatistics : ct-sensorApp.424 not responding, please
check system processes - The connect to the specified Io::ClientPipe failed.
Error Message Output from show statistics denied-attackers
Error: getDeniedAttackersStatistics : ct-sensorApp.424 not responding, please
check system processes - The connect to the specified Io::ClientPipe failed.
Possible Cause
These error messages appear when you run the show tech support command and the
Analysis Engine is not running.
Recommended Action
Verify the Analysis Engine is running and monitor it to see if the issue is
resolved.
To verify the Analysis Engine is running and to monitor the issue, follow these steps:
Step 1
Log in to the sensor.
Step 2
Verify that the Analysis Engine is not running, Check to see if the Analysis Engine reads
Not Running
.
sensor# show version