E-21
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
OL-24002-01
Appendix E Troubleshooting
Troubleshooting the Appliance
•
You can configure a maximum of two external product devices.
For More Information
•
For more information on working with OS maps and identifications, refer to Adding, Editing,
Deleting, and Moving Configured OS Maps and Adding, Editing, Deleting, and Moving Configured
OS Maps.
•
For the procedure for adding trusted hosts, refer to Adding TLS Trusted Hosts.
External Product Interfaces Troubleshooting Tips
To troubleshoot external product interfaces, check the following:
•
Make sure the interface is active by checking the output from the show statistics
external-product-interface command in the CLI, or choose .
•
Make sure you have added the CSA MC IP address to the trusted hosts. If you forgot to add it, add
it, wait a few minutes and then check again.
•
Confirm subscription login information by opening and closing a subscription on the CSA MC using
the browser.
•
Check the Event Store for the CSA MC subscription errors.
For More Information
•
For the procedure for adding trusted hosts, refer to Adding TLS Trusted Hosts.
•
For the procedure for displaying events, refer to Displaying Events.
Troubleshooting the Appliance
This section contains information to troubleshoot the appliance. It contains the following topics:
•
The Appliance and Jumbo Packet Frame Size, page E-22
•
Hardware Bypass and Link Changes and Drops, page E-22
•
Troubleshooting Loose Connections, page E-22
•
Analysis Engine is Busy, page E-23
•
Communication Problems, page E-23
•
Communication Problems, page E-23
•
The SensorApp and Alerting, page E-28
•
Blocking, page E-35
•
Logging, page E-44
•
TCP Reset Not Occurring for a Signature, page E-50
•
Software Upgrades, page E-51
Tip
Before troubleshooting the appliance, check the Caveats section of the Readme for the software
version you have installed on your sensor to see if you are dealing with a known issue.